Which of the following is included in a compliance audit?