BCI audit requirements