While preparing for a third-party audit, the vice president of risk management and the vice president of information technology have stipulated that the vendor...