1. Event Trigger

2. Define scope

3. Allocate resources for the audit

4. Evaluate results