Cyber security audit

I’ve been tasked with writing a proposal for a cyber security audit for a client who has a Shopify site, uses zapier with an AWS Api and uses Kintone for inventory management. What should the audit be composed of? And what should be in the proposal? Please any help is appreciated!!!