As someone on the receiving end of dozens of these audits per year, it’s extremely obvious that both sides are just checking off their boxes and don’t have any actual understanding of anything. One side has to perform that audit, and the other side has to comply with it. Everything is outsourced to the lowest level people possible. It’s essentially a zombie industry where both sides just mindlessly generate documentation so the business people can check their own boxes before closing a deal.