Example of how your organization can setup policies and procedures. Also, when and how an audit should be handled.