A company is purchasing an application from a vendor. The vendor does not allow the company to perform an onsite audit on its information system. However, the v...