Audit report still should be wrapping up, pretty sure multiple sources stated they were necessary for completion of the audit, but not necessary for completing the draft report.

I'm a little bit leery about what they'll contain, but Jovan seems to be pressing that they are important and necessary to finish the audit and he normally doesn't comment much on the digital side. Might be some connection logs that they can correlate with logs on the servers, but then they claim the logs on the server were flushed by a flood of connection attempts, however I would suspect those same logs would be flushed from the routers as it sounds like they've still been using them since unless I'm mistaken (pretty sure that was the first excuses "we're still using those!").