8 key aspects of a mobile device security audit program