An internal auditor wants to determine whether employees are complying with the information security policy, which prohibits leaving sensitive information on em...