An organization is considering outsourcing user administration controls for a critical system. The potential vendor has offered to perform quarterly self-audits...