While conducting an audit of a third party's Web-based payment processor, an internal auditor discovers that a programming error allows customers to create mult...