An essential step in establishing an audit program is to decide the criteria against which the audit will be conducted and to ensure that management throughout the organization knows what these criteria are. Typically criteria used for audits are company policies and procedures on environmental matters, applicable legislation and regulations and good environmental management practice.