Audits differ depending on a company’s industry, and could focus on specific laws and regulations, like HIPPA or the SPAM Act, or general company policies, procedures, and best practices. An audit could focus on one area, like e-mail marketing, or be broader, encompassing all personal information handling procedures.