The auditor should refer to agency-specific requirements for more information.
The auditor should refer to the requirements if they have questions.