Provision of ICT system security audit services