Typically, an internal audit report will have specific, detailed audit findings for exceptions, errors, design gaps or other issues found during testing. Besides those specific findings, should an audit report have an overall conclusion, such as pass/fail, acceptable/needs improvement/unacceptable or other summary opinion? Please discuss your reasoning.