1. On the general computer controls and capabilities front, the auditor general assessed control audits at 44 agencies and capability assessments at 36.

2. But the auditor said she could not find any evidence to verify this specific value.

3. As a result, the auditor was able to log on to a remote system with full administrative privileges.

4. Ali confirmed that the company will bring in an independent security auditor to assess the exposure.

5. Once again, the auditor is looking for proof that you have a process in place to meet this requirement.

6. The disaster recovery issue is just one of many to be pointed out by the auditor looking into the project.

7. Make sure that your auditor agrees to the contents of PCI services and PCI zones.

8. According to the auditor general, these results were a slight improvement across agencies overall when compared with last year.

9. And it never really satisfies the auditor because it is so distributed and never really worked in the first place.

10. But if the city chooses to close a golf course this time around, the auditor suggests a community engagement process.

11. And even these latest estimates could prove to be dubious, the auditor cautioned.

12. Your auditor wants to see that there is no direct access between these entities, and that there is proper evidence for this.

13. The auditor said in another case, default credentials for network switches, routers and remote management systems had not been reset.

14. Around one third of companies fail to provide the required documentation to satisfy the auditor on this point because of poor processes.