Score the customers' security measures by questionaires, interview, document inspectation, and site survey. Auditors clarify problems at the point of organizing, physical and techinical security.