Compliance audit and operational audit