I don't really understand how this is an audit? Shutting down departments, getting root access to systems, read/write access to codebases these are hardly the actions of auditors doing a audit. Does a audit really require this level of access?