During an audit of an organization's risk management practices, an IS auditor finds several documented IT risk acceptances have not been renewed in a timely man...