Conducting first-party and second-party audits (internal/second-party audits) based on specific requirements (standards, customer expectations, or stakeholder demands).