sharepoint audit scope/healthcheck
what areas could/should be included in the scope of an audit/healthcheck (call it what you like) of a document management system like SharePoint, above and beyond the obvious, ensuring any confidential/sensitive documents are only accessible to authorised users/groups. We have a DMS based upon sharepoint that we have a few days to focus on from a risk/audit/compliance perspective, and trying to make sure we make best use of the time.