Which of the following observations should be of GREATEST concern to an IS auditor performing an audit of change and release management controls for a new compl...