Technical and conceptual IT security audit of a VPN environment