Scope, risk treatment, evidence and the road to the audit — worked through one continuous example company.