https://www.ifsqn.com/forum/index.php/topic/11891-auditing-internally-prerequisite-procedures/