An organization needs to evaluate the effectiveness of security controls implemented on a new system. Which of the following roles should the organization entru...