I have a question about what is needed for an internal audit for security measures. I have enabled frequent password changes for Amazing Charts and the Windows network (domain). The server is located in a locked room. The wireless network code is 13 digits. What other measures should be taken to meet the requirements for an internal audit of security measures?