An IS auditor learns that a web application within the audit scope has a vulnerability that could lead to the exposure of sensitive data. Which of the following...