An internal auditor is assessing the risks related to an organization's mobile device policy. She notes that the organization allows third parties (vendors and...