About the Audit thing...
It doesn't matter how many audits you have or where they originate from or even who is on them if the organisation being audited doesn't learn from or even acknowledge the result.
Ignorance of audit results is rife in almost all organisations but in my experience it really comes to the fore in military organisations. Chug and Tuc's common sense posts are testament to military (MOD's) rejection of evidential issues.