If he's anything like the SOX auditors I used to work with, he'll be asking for proof of everything you said - backup histories, security permissions, sign-offs, etc.
Gail Shaw
Microsoft Certified Master: SQL Server, MVP, M.Sc (Comp Sci)
SQL In The Wild: Discussions on DB performance with occasional diversions into recoverability