An auditee responds to a corrective action request by stating that the problem has never occurred before and is "not the norm for our operation." Which of the following is the most appropriate action for the lead auditor?