An audit examines an organization's policies, procedures, and controls to determine their adherence to an applicable set of laws, regulations, or standards. An audit may be conducted by internal staff or an external auditor, and may include reviewing documents, interviewing personnel, and observing processes and controls in action. The output of an audit may include findings for any areas of non-compliance or unacceptable levels of risk.