An IS auditor is reviewing how password resets are performed for users working remotely. Which type of documentation should be requested to understand the detai...