Our security auditor is an idiot. How do I give him the information he wants?