There are additional questions that need to be asked. And not every category of questions will matter equally for every company. Some best practices to follow for your company’s audit:
Focus the purpose of the audit on planning and control.
Structure questions to yield a “yes” or “no” answer.
Be objective. Don’t inject bias or vendettas into the audit.
Perform risk audits regularly to expose trends.
Prioritize the risks that should be managed.
Track business development costs carefully to understand how effectively risks are covered.