Statistics for A proposed framework that enhances the quality of cyber security audits