During an audit of a financial application, it was determined that many terminated users' accounts were not disabled. Which of the following should be the IS au...