an is auditor at a bank is performing compliance testing and has discovered that one of the branches has virus signatures that have not been updated in over six months. in this case, the is auditor should recommend: