Starts with Independent audit. Within the government this audit is focused on financial systems to include Cloud architecture, client side system with attention to software providing the service. An audit will use NIST standards for control review and validation for compliance, in addition there is a FISCAM overlay for these audits as well.