Audit report 10-10-2017-014, covering information security Annex A controls.