avoiding inernal audit problems