industry audit requirements