control system audit