An employee approaches an IS auditor and expresses concern about a critical security issue in a newly installed application. Which of the following would be the...