An IS auditor learns that a business owner violated the organization's security policy by creating a web page with access to production data. The auditor's NEXT...