An IS auditor observes that each department follows a different approach for creating and securing spreadsheet macros. Which of the following is the auditor's B...