A regulatory audit of an IT department has identified discrepancies between processes described in the procedures and what is actually done by system administra...