Yes, we have had several external and internal audits. Out of all the departments, IT asset management is praised to be one of the better organized depts with the best practices implemented.
Yes, multiple times. It takes a lot of time and effort. Some audits have been successful (no bill) Some others not so much. But all of them have been negotiated. The auditor statements can always be negotiated as they are most generally not right.