mandatory audits for large enterprises