IT Incident Audit Plan (Please see underlined and bold part)

Select an organization that had a publicly reported IT-related incident (such as a data breach, data loss, or service outage) in the last 5 years. Perform research to determine what happened, to include what information systems were breached, what the vulnerabilities were, and how they were exploited. Obtain sufficient information so you can develop an audit plan to determine if similar conditions exist at your organization. Consult library resources as needed. The audit plan should include audit objective(s), scope and methodology (what you'll evaluate, evaluating criteria, and audit procedures). Deliverable is a written report containing a summary of the incident and an audit plan.