Hi there,

a question has been posed to me, and I'm wondering if anyone can give me advice on what's the best way to tackle this issue. Here's the question:

Suppose I wanted to audit the computers in an office for compliance to an acceptable usage policy (e.g. acceptable email usage policy). How many of the computers in the office would I have to examine in order to be able to say with high probability that there are no breaches of the acceptable usage policy. Obviously I can't examine every single computer, but is there a percentage that I could examine that would mean there was, say, a less than 5% chance of a breach?

Thanks in advance for your help!
daveor