Which of the following is not a step performed in a compliance audit?

a) Document the audit process and conclusions.

B )Obtain written management representations.

C) Consider subsequent events.

D) Perform external background checks on members of management.