Security and Audit: Security procedures, including authentication and access control, who-are-the-gatekeepers and how does one contact them, location and accessibility of the last audit, when the next audit occurs, who performs the audit, what the audit covers, and notes about what???s expected both in terms of the audit and its report.