All findings in this audit were of a sensitive nature and were reported to management in a private letter in the interests of information system security.