Audit report 20 08 12 72, covering the re-audit of information security policies.