The audit services include four steps: - Initial manual and automatic contact analysis - If a bug is found, it is urgently reported to the developers to fix. - Developers are fixing the bug - The auditors check the code again, and if nothing is found, they make a report.