Audit readiness starts in the software