If officials of the audited entity do not have such a process, auditors may wish to establish their own process.
When the audited entity does not have a process, auditors may wish to use their own.