https://www.ifsqn.com/forum/index.php/topic/17102-internal-auditing-writing-policy-audit-format-etc/