During an audit, auditors review relevant records, documents, and processes to assess compliance, identify risks, and evaluate the effectiveness of controls. They may conduct interviews, perform data analysis, and examine evidence to form conclusions and provide recommendations for improvement.