Comment by saas_sam

Can you find any website or document that validates that these "random audits" are done? By whom and on what cadence? I've not been able to find anything like this. Just hand-waving, assertions that "someone does something," and so on.