So the second option is rarely used in real-world system implementations.

The fact that ASDI was evaluating this proof-of-concept system as a real-world system and finding so few flaws in our implementation of requirements was a strong victory for us.

This article focuses specifically on the practical aspects of periodic system auditing based on real-world requirements from a system administrator of a subnet in a large academic network.