There are generally five phases of a GAGAS audit, the auditors tell WIRED: planning, evidence gathering, evaluation, reporting, and follow up. Auditors work to ... system in a week or two ...