audit framework and regulation