An IS auditor finds that management has signed a contract with a new application service provider but did not obtain third-party audit reports as part of the du...