capability audit