http://www.gardnerlaw.net/AuditAreasOfFocus.pdf