Is the security audit customisable?