testing and auditing compliance program