Information systems within an organization are thoroughly evaluated and reported on in System Audit Reports (SARs).