An IS auditor has been asked to assess the security of a recently migrated database system that contains personal and financial data for a bank's customers. Whi...