Ann, a security analyst, is preparing for an upcoming security audit. Which of the following would Ann use to ensure that she identifies unapplied security cont...