Internal Audit Programs: Building Governance Excellence form the Ground Up
Internal Audit programs: Building Governance Excellence from the Ground Up
Internal audit in data centre and fibre network operations has evolved form financial compliance oversight to comprehensive governance mechanism that determines organisational effectiveness, risk management capability, and operational excellence. Yet despite growing recognition of internal audit value, many organisations continue implementing audit programs that focus narrowly on compliance verification rather than developing comprehensive assurance and advisory capabilities that drive genuine business improvement and risk mitigation.
Through our partnership between AuditCo and ASafe Global, combining internal audit expertise with digital infrastructure operational knowledge, we have developed systematic approaches to internal audit programme development that deliver both regulatory compliance assurance and operational improvement insights. This partnership enables organisations to build audit capabilities addressing technical operations, regulatory compliance and business processes whilst providing independent assurance and advisory services that support board oversight, executive decision-making and continuous improvement.
The challenge lies not merely in conducting periodic audits or meeting regulatory requirements, but in developing integrated audit programmes that provide meaningful assurance whilst identifying improvement opportunities across technical, operational, and governance domains. Our combined experience demonstrates that effective internal audit requires appropriate independence, technical competency, systematic methodologies and stakeholder engagement delivering value that justifies investment whilst building organisational confidence in governance and risk management capabilities.
Understanding Internal Audit in Digital Infrastructure
Internal audit programmes in data centre and telecommunications operations must address unique challenges including technical complexity, operational criticality and rapidly evolving technology whilst maintaining independence and providing assurance across diverse stakeholder expectations and regulatory requirements.
The Three Lines Model and Internal Audit Positioning
First-line operational management responsibilities include day to day risk management, control implementation and performance delivery requiring appropriate oversight and assurance. First line functions own risks and controls whilst maintaining accountability for operational outcomes. The AuditCo and ASafe Global partnership recognises first-line ownership whilst providing appropriate oversight ensuring controls operate effectively and risks receive adequate management attention.
Secon-line oversight management functions including compliance, risk management and quality assurance provide monitoring and guidance supporting first-line risk management. Second-line functions establish frameworks, monitoring compliance, and provide specialist expertise complementing operational management. Partnership capabilities address both second-line function development and independent assurance of second-line effectiveness comprehensive risk oversight
Third-line internal audit provides independent assurance regarding governance, risk management and control effectiveness to boards and senior management. Internal audit independence enables objective assessment whilst advisory services support improvement without compromising assurance responsibilities. Our combined expertise delivers both independent assurance and practical improvement recommendations leveraging technical knowledge and governance experience.
Regulatory and Governance Requirements
UK Corporate Governance Code provisions regarding internal audit require boards to consider internal audit needs and establish appropriate functions where beneficial. Corperate governance requirements apply to listed companies whilst voluntary adoption demonstrates governance commitment supporting stakeholder confidence. The AuditCO and ASafe Global partnership supports internal audit establishment and effectiveness evaluation ensuring governance requirements receive appropriate attention
Financial services regulations including PRA and FCA requirements mandate internal audit functions for regulated entities operating digital infrastructure. Regulatory expectations address audit independence, competency, scope and reporting arrangements ensuring effective governance oversight. Partnership expertise navigates regulatory requirements ensuring audit programmes meet both regulatory expectations and business needs.
ISO standards including ISO9001 quality management and ISO27001 information security require internal audit programmes addressing management system effectiveness. Standard requirements establish minimum audit frequencies, competency expectations, and reporting arrangements supporting certification maintenance. Our combined capabilities deliver audit programmes meeting ISO requirements whilst providing broader governance value beyond certification compliance.
Stakeholder Expectations and Value Delivery
Board and audit committee expectations for internal audit include independent assurance regarding risk management effectiveness, control environment assessment, and emerging risk identification. Audit committee engagement requires appropriate reporting, executive session access and responsiveness to committee priorities. The AuditCo and ASafe Global partnership facilitates effective audit committee relationships ensuring internal audit delivers expected assurance and advisory value
Executive management expectations often emphasise operational improvement insights, efficiency opportunities, and practical recommendations supporting business objectives. Management relationships require balance between independent challenge and collaborative improvement supporting both assurance and adviosry responsibilities. Partnership approaches maintain appropriate independence whilst delivering practical value through operational knowledge and improvement expertise.
External stake-holder expectations including investors, clients and regulators
increasingly emphasise internal audit quality and independence as governance indicators. External stakeholders evaluate internal audit through charter provisions, reporting relationships, and audit committee oversight. Our combined experience supports internal audit positioning ensuring appropriate independence, competency, and effectiveness demonstration to diverse stakeholders.
Establishing Internal Audit Foundation
Effective internal audit programmes require systematic foundation establishment addressing charter development, independence assurance, resource allocation, and quality frameworks supporting both current effectiveness and future development.
Internal Audit Charter and Authority
Audit charter development establishes internal audit purpose, authority, and responsibility whilst defining scope, independence arrangements, and reporting relationships. Charter provisions must address stakeholder expectations, regulatory requirements, and organisational context ensuring appropriate mandate and authority. The AuditCo and ASafe Global partnership develops audit charters balancing independence with practical operational engagement supporting both assurance and advisory effectiveness.
Scope definition addresses audit coverage across financial, operational, technical, and governance domains preventing gaps whilst managing resource constraints. Comprehensive scope provisions enable audit programme flexibility whilst establishing boundaries clarifying audit responsibilities versus operational management accountabilities. Partnership frameworks provide scope guidance specifically addressing data centre and telecommunications operations ensuring appropriate coverage of technical and operational risks.
Reporting relationship establishment including audit committee reporting, administrative arrangements, and executive access ensures appropriate independence whilst maintaining operational effectiveness. Reporting structure design balances independence requirements with practical organisational integration. Our combined expertise supports reporting relationship design ensuring both governance independence and operational practicality.
Independence and Objectivity Assurance
Organisational independence through reporting to audit committee rather than executive management provides appropriate authority and objectivity enabling genuine independent assurance. Independence arrangements must address both structural positioning and day-to-day operational relationships ensuring objectivity maintenance. The AuditCo and ASafe Global partnership implements independence arrangements meeting governance best practices whilst maintaining practical operational engagement.
Individual objectivity requirements including rotation provisions, conflict assessment, and impairment management ensure audit personnel maintain appropriate objectivity throughout audit engagements. Objectivity frameworks address both actual impairments and perceived conflicts affecting stakeholder confidence. Partnership frameworks include objectivity assessment and management provisions supporting both compliance and stakeholder confidence.
Co-sourcing and outsourcing arrangements enable resource flexibility and specialist expertise access whilst requiring careful independence consideration. External resource arrangements must maintain appropriate oversight and independence whilst leveraging external capabilities. Our combined experience provides balanced co-sourcing models combining internal capability with external expertise ensuring both independence and technical competency.
Resource Planning and Competency Development
Audit resource assessment considering organisational size, operational complexity, and risk profile determines appropriate staffing levels and competency requirements. Resource planning must balance comprehensive coverage with practical constraints whilst considering both permanent staff and external augmentation. The AuditCo and ASafe Global partnership provides resource assessment supporting appropriate capability development and external resource integration.
Technical competency requirements for data centre and network infrastructure audit include understanding of power systems, cooling infrastructure, network technologies, and cybersecurity alongside traditional audit skills. Technical competency development through training, certification, and practical experience requires systematic planning and investment. Partnership capabilities include technical training and competency development specifically designed for digital infrastructure internal audit.
Professional certification including CIA, CISA, and industry-specific credentials demonstrates audit competency whilst supporting professional development and stakeholder confidence. Certification strategies must balance breadth and depth whilst considering career development and organisational needs. Our combined expertise guides certification planning supporting both individual development and organisational capability building.
Risk-Based Audit Planning and Execution
Systematic risk-based audit planning ensures audit resources focus on highest-risk areas and greatest value opportunities whilst maintaining appropriate coverage across organisational activities and regulatory requirements.
Enterprise Risk Assessment and Audit Universe Development
Risk assessment methodologies combining likelihood and impact evaluation identify audit priorities whilst considering risk velocity, control effectiveness, and management capabilities. Risk assessment must address both current risks and emerging threats requiring forward-looking analysis. The AuditCo and ASafe Global partnership develops risk assessment frameworks specifically addressing data centre and telecommunications risk profiles ensuring appropriate audit focus.
Audit universe development catalogues auditable entities across financial, operational, technical, and governance domains providing comprehensive view of potential audit coverage. Universe development requires understanding of organisational structure, operational processes, and risk landscape ensuring nothing falls through gaps. Partnership frameworks provide audit universe templates specifically designed for digital infrastructure organisations addressing both traditional and technology-specific audit areas.
Stakeholder input collection from board members, executives, and operational management ensures audit planning addresses stakeholder priorities whilst identifying concerns requiring attention. Stakeholder engagement must balance diverse perspectives whilst maintaining risk-based prioritisation. Our combined experience facilitates stakeholder engagement ensuring audit programmes address both governance oversight needs and operational improvement opportunities.
Annual Audit Plan Development
Multi-year planning horizons ensure comprehensive universe coverage over reasonable timeframes whilst enabling flexibility for emerging priorities. Long-term planning provides assurance regarding comprehensive coverage whilst annual updates maintain relevance and responsiveness. The AuditCo and ASafe Global partnership develops multi-year audit plans balancing systematic coverage with practical flexibility.
Audit selection criteria including risk ranking, regulatory requirements, time since last audit, and stakeholder requests guide audit prioritisation whilst documenting selection rationale. Transparent selection criteria support stakeholder understanding whilst enabling periodic adjustment based on changing circumstances. Partnership methodologies provide selection frameworks balancing quantitative risk assessment with qualitative judgement.
Resource allocation across planned audits, unplanned requests, advisory projects, and continuous monitoring determines capacity distribution ensuring appropriate balance between scheduled and flexible capacity. Resource planning must accommodate both predictable audit requirements and emerging needs. Our combined expertise guides resource allocation ensuring both systematic coverage and responsive capability.
Audit Execution and Methodology
Planning phase activities including scope definition, objective establishment, and preliminary risk assessment establish audit foundations ensuring focused efficient execution. Planning quality determines audit effectiveness whilst excessive planning creates inefficiency requiring appropriate balance. The AuditCo and ASafe Global partnership provides audit methodology guidance ensuring efficient planning supporting effective fieldwork and reporting.
Fieldwork execution through interviews, walk-throughs, testing, and observation gathers audit evidence supporting findings and conclusions. Fieldwork approaches must balance thoroughness with efficiency whilst maintaining professional scepticism and objectivity. Partnership expertise includes fieldwork guidance specifically addressing technical infrastructure audit requiring both audit skills and operational knowledge.
Finding development including issue identification, root cause analysis, risk assessment, and recommendation formulation ensures audit deliverables provide value through actionable improvement insights. Finding quality determines audit impact requiring appropriate evidence, analysis, and practical recommendations. Our combined experience develops findings addressing both technical accuracy and practical implementation feasibility.
Technical and Operational Audit Approaches
Data centre and telecommunications infrastructure audit requires specialised approaches addressing technical systems, operational processes, and performance management beyond traditional financial and compliance audit methodologies.
Critical Infrastructure Systems Audit
Power infrastructure audit addresses UPS systems, generators, power distribution, and electrical safety covering both equipment reliability and operational procedures. Power system audit requires understanding of electrical engineering, redundancy concepts, and failure mode analysis. The AuditCo and ASafe Global partnership delivers power infrastructure audit combining electrical expertise with audit methodology ensuring both technical accuracy and governance insights.
Cooling infrastructure audit evaluates mechanical systems, control strategies, and efficiency performance assessing both current effectiveness and maintenance adequacy. Cooling system audit requires understanding of HVAC principles, control systems, and efficiency metrics. Partnership capabilities include cooling system audit expertise addressing both reliability and efficiency considerations.
Network infrastructure audit addresses fibre routes, equipment redundancy, and performance monitoring evaluating both physical infrastructure and operational management. Network audit requires understanding of telecommunications technologies, routing protocols, and redundancy strategies. Our combined experience delivers network infrastructure audit providing both technical assessment and governance assurance.
Operational Process and Control Audit
Change management audit evaluates processes for planning, approving, implementing, and verifying changes to systems and infrastructure. Change management effectiveness directly affects both operational stability and security requiring robust processes and controls. The AuditCo and ASafe Global partnership audits change management addressing both process design and practical implementation effectiveness.
Incident management audit assesses detection, response, resolution, and learning processes ensuring effective handling of operational issues and security events. Incident management audit must address both technical response capabilities and governance oversight. Partnership expertise evaluates incident management across technical, operational, and governance dimensions.
Capacity management audit examines planning, monitoring, and expansion processes ensuring adequate capacity whilst avoiding excessive investment. Capacity management requires balancing growth requirements with financial constraints requiring both technical analysis and business judgement. Our combined capabilities audit capacity management processes addressing both technical adequacy and business alignment.
Performance and Efficiency Audit
Energy efficiency audit evaluates PUE performance, optimisation opportunities, and management systems addressing both current performance and improvement potential. Efficiency audit requires understanding of data centre operations, energy management, and best practices. The AuditCo and ASafe Global partnership delivers efficiency audit combining technical analysis with improvement recommendations.
Service level achievement audit assesses performance against commitments examining both actual results and measurement systems. SLA audit must evaluate both technical performance and reporting accuracy ensuring stakeholder confidence. Partnership capabilities include SLA audit expertise addressing measurement systems, performance analysis, and improvement opportunities.
Cost efficiency audit examines operational costs, procurement practices, and resource utilisation identifying optimisation opportunities whilst ensuring adequate capability. Cost audit requires balancing efficiency with operational requirements and risk management. Our combined experience delivers cost efficiency audit providing both savings identification and risk assessment.
Compliance and Regulatory Audit
Comprehensive compliance audit addresses regulatory requirements, industry standards, and internal policies ensuring adherence whilst identifying improvement opportunities in compliance management systems and processes.
Regulatory Compliance Verification
Data protection compliance audit evaluates GDPR and UK GDPR adherence including consent management, data subject rights, and breach notification processes. Data protection audit requires understanding of both regulatory requirements and technical implementations. The AuditCo and ASafe Global partnership delivers data protection audit combining regulatory expertise with technical assessment capabilities.
Health and safety compliance audit examines CDM compliance, risk assessments, and safety management systems ensuring both regulatory adherence and effective safety culture. Safety audit must address both documentation compliance and practical implementation effectiveness. Partnership expertise delivers safety audit combining regulatory knowledge with operational safety assessment.
Environmental compliance audit addresses environmental permits, emissions reporting, and waste management ensuring both current compliance and management system effectiveness. Environmental audit requires understanding of regulatory frameworks and operational environmental management. Our combined capabilities deliver environmental compliance audit supporting both regulatory assurance and improvement identification.
Industry Standards and Certification Audit
ISO 27001 information security audit examines ISMS effectiveness including risk assessment, control implementation, and continuous improvement processes. ISO 27001 audit requires understanding of both standard requirements and information security best practices. The AuditCo and ASafe Global partnership delivers ISO audit combining standard knowledge with security expertise.
ISO 9001 quality management audit evaluates QMS effectiveness including process management, continuous improvement, and customer satisfaction. Quality audit must address both standard compliance and practical effectiveness. Partnership capabilities include ISO 9001 audit expertise supporting both certification maintenance and operational improvement.
Uptime Institute Tier certification compliance audit examines facility design, operations, and performance against Tier requirements ensuring continued compliance with certification commitments. Tier compliance audit requires understanding of Tier topology, operational, and sustainability requirements. Our combined experience delivers Tier compliance audit supporting both certification maintenance and operational excellence.
Policy and Procedure Compliance
Corporate policy compliance audit examines adherence to internal policies across various domains including procurement, security, and operations. Policy audit identifies both compliance gaps and policy adequacy issues. The AuditCo and ASafe Global partnership delivers policy compliance audit examining both adherence and policy effectiveness.
Standard operating procedure compliance audit evaluates adherence to established procedures whilst assessing procedure adequacy and currency. SOP audit must balance compliance verification with practical improvement identification. Partnership expertise delivers SOP audit addressing both compliance and operational effectiveness.
Control framework audit examines internal control systems across financial, operational, and compliance domains ensuring effective control environment. Control audit requires understanding of control concepts and risk management frameworks. Our combined capabilities deliver control framework audit supporting both assurance and improvement.
Information Security and Cybersecurity Audit
Information security and cybersecurity audit addresses critical risk areas for digital infrastructure requiring specialised expertise and comprehensive approaches covering both technical controls and governance processes.
Access Control and Identity Management
Access control audit examines authentication systems, authorisation processes, and privileged access management ensuring appropriate security whilst enabling operational effectiveness. Access control audit requires understanding of both security principles and operational requirements. The AuditCo and ASafe Global partnership delivers access control audit combining security expertise with operational knowledge.
Identity lifecycle management audit evaluates provisioning, modification, and de-provisioning processes ensuring timely appropriate access whilst preventing security gaps. Identity management audit must address both automated systems and manual processes. Partnership capabilities include identity management audit expertise addressing both security and efficiency.
Segregation of duties audit examines role design and conflict management ensuring appropriate separation whilst maintaining operational practicality. SoD audit requires understanding of both security principles and operational workflows. Our combined experience delivers SoD audit balancing security requirements with operational effectiveness.
Network Security and Infrastructure Protection
Perimeter security audit examines firewalls, intrusion detection, and DDoS protection assessing both configuration adequacy and operational effectiveness. Perimeter security audit requires understanding of network security technologies and threat landscapes. The AuditCo and ASafe Global partnership delivers network security audit combining technical expertise with threat intelligence.
Network segmentation audit evaluates zone design, VLAN configuration, and traffic controls ensuring appropriate isolation whilst enabling necessary communications. Segmentation audit requires understanding of both security architecture and operational requirements. Partnership expertise delivers segmentation audit addressing both security effectiveness and operational practicality.
Vulnerability management audit examines scanning programmes, patch management, and remediation processes ensuring systematic vulnerability management. Vulnerability management audit must address both process effectiveness and technical execution. Our combined capabilities deliver vulnerability management audit supporting both security improvement and operational efficiency.
Security Monitoring and Incident Response
Security monitoring audit evaluates SIEM systems, log management, and alert processes ensuring effective threat detection and response capabilities. Monitoring audit requires understanding of both technologies and operational processes. The AuditCo and ASafe Global partnership delivers security monitoring audit combining technical assessment with operational evaluation.
Incident response audit examines detection, analysis, containment, and recovery processes ensuring effective security incident handling. Incident response audit must address both technical capabilities and governance processes. Partnership capabilities include incident response audit expertise addressing both effectiveness and continuous improvement.
Penetration testing and security assessment coordination through internal audit oversight ensures appropriate testing scope, methodology, and finding remediation. Security testing oversight requires understanding of both testing methodologies and audit principles. Our combined experience coordinates security testing supporting both assurance and improvement objectives.
Reporting and Communication Excellence
Effective audit reporting and stakeholder communication ensures audit insights drive improvement whilst building stakeholder confidence in governance and risk management capabilities.
Audit Report Development
Executive summary development distilling key findings and recommendations into concise accessible formats supports senior management and board understanding. Executive summaries must balance brevity with completeness providing sufficient context for informed decision-making. The AuditCo and ASafe Global partnership develops report formats optimising both comprehensiveness and accessibility.
Detailed finding documentation including condition, criteria, cause, and consequence analysis provides thorough understanding supporting effective remediation. Finding documentation must provide sufficient detail whilst maintaining clarity and focus on material issues. Partnership frameworks provide finding documentation standards ensuring consistency and quality.
Recommendation development addressing both immediate remediation and systemic improvement ensures audit deliverables drive meaningful change. Recommendations must balance comprehensiveness with practicality whilst considering implementation constraints and resource availability. Our combined expertise develops recommendations addressing both technical accuracy and implementation feasibility.
Stakeholder Communication and Engagement
Audit committee reporting including executive sessions, written reports, and periodic updates ensures appropriate governance oversight. Committee reporting must provide both assurance and transparency regarding audit findings and management responses. The AuditCo and ASafe Global partnership facilitates effective committee reporting ensuring appropriate governance engagement.
Management reporting balancing accountability with collaboration supports effective working relationships whilst maintaining appropriate independence. Management communication requires both professional scepticism and constructive engagement supporting improvement. Partnership approaches maintain independence whilst delivering practical value through operational insights.
Operational communication including closeout meetings, finding validation, and ongoing dialogue ensures accurate understanding and effective remediation. Operational engagement requires both audit rigour and practical understanding of operational constraints. Our combined experience facilitates effective operational communication supporting both accuracy and improvement.
Follow-Up and Continuous Monitoring
Remediation tracking systems monitor management action implementation ensuring effective issue resolution and sustained improvement. Follow-up processes must balance thoroughness with efficiency whilst maintaining appropriate audit independence. The AuditCo and ASafe Global partnership implements follow-up systems ensuring both accountability and improvement verification.
Continuous monitoring programmes for key controls and high-risk areas provide ongoing assurance between formal audits. Continuous monitoring requires appropriate tool selection, threshold establishment, and exception handling. Partnership capabilities include continuous monitoring design supporting both efficiency and effectiveness.
Trend analysis across multiple audits identifies systemic issues, emerging risks, and improvement patterns informing both audit planning and organisational development. Trend analysis provides insights beyond individual audit findings supporting strategic governance improvement. Our combined expertise delivers trend analysis supporting both audit programme development and organisational improvement.
Quality Assurance and Programme Improvement
Internal audit quality assurance ensures audit programme effectiveness, professional standards compliance, and continuous improvement supporting both stakeholder confidence and audit impact.
Quality Assurance Framework Development
Internal quality reviews conducted periodically by senior audit personnel or independent reviewers ensure audit work meets professional standards and organisational expectations. Internal reviews must balance assurance with development supporting both quality and continuous improvement. The AuditCo and ASafe Global partnership develops quality review frameworks ensuring both standards compliance and practical effectiveness.
Peer review arrangements through reciprocal arrangements with other organisations or professional networks provide independent quality assessment. Peer reviews offer external perspectives whilst supporting professional development and best practice identification. Partnership networks enable peer review access supporting quality assurance and professional development.
External quality assessments required every five years under IIA standards provide comprehensive independent evaluation of internal audit conformance with professional standards. External assessments require qualified independent assessors whilst providing valuable insights and stakeholder confidence. Our combined experience supports external assessment preparation and response ensuring both standards compliance and improvement.
Performance Measurement and Metrics
Audit cycle time measurement tracking planning through reporting ensures efficient audit execution. Cycle time metrics must balance efficiency with thoroughness whilst identifying improvement opportunities. The AuditCo and ASafe Global partnership develops performance metrics appropriate for digital infrastructure audit contexts.
Stakeholder satisfaction measurement through surveys and feedback collection provides insights into audit value delivery and relationship effectiveness. Satisfaction metrics must capture both assurance value and advisory impact. Partnership frameworks include stakeholder feedback systems supporting both accountability and improvement.
Recommendation implementation tracking measures audit impact through remediation completion and sustained improvement. Implementation metrics provide evidence of audit value whilst identifying barriers requiring attention. Our combined expertise develops implementation tracking supporting both accountability and continuous improvement.
Continuous Professional Development
Technical training programmes addressing data centre operations, telecommunications infrastructure, and emerging technologies maintain audit team competency. Technical training must balance breadth and depth whilst supporting both current needs and future requirements. The AuditCo and ASafe Global partnership provides technical training specifically designed for digital infrastructure internal audit.
Professional certification maintenance including CPE requirements and credential renewals ensures ongoing professional competency and standards awareness. Certification maintenance requires systematic planning and resource allocation. Partnership support includes CPE planning and delivery supporting both individual and organisational development.
Industry engagement through association participation, conference attendance, and knowledge sharing supports professional development whilst building networks and capabilities. Industry participation provides learning opportunities whilst demonstrating thought leadership. Our combined experience facilitates industry engagement supporting both capability development and organisational reputation.
Internal audit represents essential governance capability providing independent assurance and advisory services supporting board oversight, risk management, and operational excellence in data centre and telecommunications operations. Through the AuditCo and ASafe Global partnership, organisations gain access to combined internal audit expertise and digital infrastructure operational knowledge enabling comprehensive audit programmes addressing both technical complexity and governance requirements.
Our partnership delivers value through systematic approaches to audit programme development, risk-based planning, technical and operational audit execution, and quality assurance supporting both regulatory compliance and continuous improvement. This integrated capability enables organisations to build sophisticated internal audit functions providing meaningful assurance whilst identifying improvement opportunities across technical, operational, and governance domains.
Success in internal audit requires understanding that audit programmes provide strategic governance capability rather than simply compliance verification. Organisations working with the AuditCo and ASafe Global partnership develop sophisticated audit capabilities supporting both immediate assurance needs and long-term governance excellence whilst building stakeholder confidence in risk management and control effectiveness throughout digital infrastructure operations.
For More Information Visit https://asafeglobal.com/ or contact info@auditco.com.au
