During the risk assessment of an organization that processes credit cards, a number of existing controls have been found to be ineffective and do not meet indus...