An IS auditor has completed the fieldwork phase of a network security review and is preparing the initial draft of the audit report. Which of the following find...