THE FACT ABOUT CYBER SECURITY AUDIT THAT NO ONE IS SUGGESTING