Identification, collection, and communication of key metrics for evaluating performance of the area being audited.
Employees’ understanding of their control responsibilities relative to the larger system.
Mechanisms for addressing customer, supplier, or employee concerns, complaints, and disputes in a timely manner.