Which of the following should be included in an audit report?

a. Any security vulnerabilities found
b. The machines affected by these vulnerabilities
c. Recommended steps to correct the vulnerabilities
d. All the above

ANS: D