testing and auditing