https://kudrin.vc/2007/09/21/dc2007/
Documenting in internal audit