Network security: The auditors point of view