Audits are not focused on risk and significance

Control

Maintain robust dialogue with stakeholders