There’s a difference between an “audit” and a basic sanity check. You wouldn’t do an audit unless there was strong evidence there is something worth auditing.