An IS auditor determines that the vendor's deliverables do not include the source code for a newly acquired product. To address this issue, which of the followi...