Audit report 12-10-2017-021, covering event logging, technical vulnerability management, antivirus controls, network security and the use of privileged utility programs.