operational audit challenges