governance and auditing essentials for cyber security