https://www.ifsqn.com/forum/index.php/topic/39548-proactive-internal-audit-approach/