Adopt a process approach to internal audits