STRENGTHENING CYBER DEFENSES: A GUIDE TO IT SECURITY AUDITS IN THE UK