Computer software for use in identifying and auditing risks associated with the operation of computer networks and company facilities