Adopt a process approach to internal audits (Part 1)