A security analyst finds an application that cannot enforce the organization’s password policy. An exception is granted. As a compensating control, all users mu...