Critical steps in designing an effective audit program