The auditor should also determine whether previous recommendations have been carried out.
It is up to the auditor to tell if the recommendations were completed.