An internal audit report includes a recommendation to remove inappropriate user access to an IT application. Which of the following does the recommendation repr...