procedures as to whether the processes have been implemented; observing and inspecting management practices, process testing and evidence gathering across the organisation on a sample basis, and collecting and evaluating documentary evidence and management representations that support adherence to the principles.