Auditing is a feedback mechanism that helps telling these to management.

• Do we have adequate controls in place?
• How close to the recognized, relevant standards of the existing controls?
• How do we comply with those requirements? 
• What can we do more?