CARO audit procedures