During an audit of a production database, an IS auditor finds that database administrators (DBAs) use a shared privileged account to perform maintenance, and native database audit logging of privileged activity is disabled to improve performance. Which of the following findings should the auditor identify as the MOST significant concern?