Ages ago, I was part of a department that was subject to a compliance inspection. The inspection wasn’t a surprise, but it was short notice. We spent days making sure that our two networks of hundreds of computers each were compliant (they mostly were) and that our documentation was up to date (it mostly was). They spent their entire inspection looking at two internal DNS servers. (They passed and we were praised for our higher than average compliance.)