Conducting A Cyber Security Audit