Which of the following would be MOST time and cost efficient when performing a control self-assessment (CSA) for an organization with a large number of widely d...