Great job, RA!

If doing an audit for a company I would start by asking for their policies.
If doint an audit for an acquaintance, I start by finding out from them what level of security they...