Audit data, obtained by reviewing written records and procedures, inter- viewing personnel, and personal observation, are collected from both an administrative area and a management or operational area,which controls the physical of the administrative area includes a review of how well or how poorly management has implemented the program. Audit of the operational areas,whereby management controls the physical environment, includes assessing the surroundings and external conditions that influence the daily operation of the organization
