https://kudrin.vc/2008/04/29/cf2008/
Internal audit competency model