Most often, basic information about the systems used, the infrastructure used, the responsible persons and, if you have one, the IT documentation that is available is required. If part of the information is not formed or the documentation is not complete, we can still perform the audit based on your actual IT environment and the available data.