Concept of SMART principle in IT security and audit policy