auditable requirements