Finding errors and failures is quite simple. Finding their solutions not so much. Audits should in my opinion provide with specific solutions that are not vague and are totally actionable. Otherwise we need to call in other experts to translate them.