To support an audit, an information security consultant wants to share with relevant teams a list of additional controls that are needed to protect the organiza...