What would you do?

If i was hired as an IT security Consultant to fix the security problem at a manufacturing company.I haven't give a time in 90 days and a budget of $ 1 million. I'll begin with hiring a professional agent to gather more information through primary and secondary research, structured and unstructured interviews, surveys, etc. That whom people are hacking the access of the manufacturing company.And then after that if i haven't know the people who are doing to discontrol the code, I will give them a penalties and i after that I will be change the code in many ways so that for those who hackers are not easily to discontrol the acccess of manufacturing company.