John is the new network administrator at Trust Financial Services.
Three weeks into his job, John's boss asks him to perform a preliminary
audit of the bank's information systems to make sure they are secure.
Because John is fairly new to information systems security, he only
vaguely understands what all is involved.
What should John consider
as he performs his preliminary audit? Check all that apply: