A.8.34 Protection of information systems during audit and testing