It is significant for that audit being arranged with the auditee department in order to avoid any effect of ‘catching them out’.  Some companies undertake a proper penned notification process, but in a little corporation it would be equally efficient to contact in and set up to go to ‘next Friday afternoon’.Holders of IIA credentials might