Assume that the client has an adequate access control plan and, based on your interviews, the access policies are operating as described. The control procedures identified by the auditor include restricted use of passwords, frequent changes in passwords to keep pace with job changes, and monitoring of repeated attempts at accessing the system by unauthorized users.

Required

Write an audit program that would gather evidence to determine the effectiveness of the control procedures in operation.