I found this article on the audit. It’s also about boring but necessary things like stockpile management, automation, climate risk, and bookkeeping. It’s broken into 30 sub-audits. It sounds like all of these must be fully passed as “clean” for an audit to not be considered failing.