Security in museums and galleries: the security audit