During an audit engagement, the internal auditor discovered that physical security of the data center did not meet the organization's established requirements....