Internal auditing for hospitals