As part of its vendor management program, an organization has commissioned an audit of a vendor's control framework for the purpose of implementing compensating...