fixes on audits yearly controls, csv exports for compliance, disabling security services, etc