My organization has not been audited that I know of. However, many of my clients’ organizations have. Some paid hefty fines, others were able to negotiate because they had done their homework, conducted and internal audit, and had a collection of pre-audit reports together with initial goals for negotiation, and an internal agreement on what their acceptable bottom was.