You could use CASA as a demonstration project of “worlds best practice” in regulation. It’s small enough to be doable.
.....That is of course only if the audit found any “gaps” between actual and desired performance levels, which may not be the case..