Audit findings show more work needed