IT security audit (comprehensive technical security tests by internal and external penetration tests and security scans)