I recently worked at a bank that was audited. all I can say is good luck. The audit started during the 2nd quarter of last year, and as of February of this year, had not beeen completed (although the total onsite time was just a couple of weeks). They asked for a ton of info, from quite far back, as well as the results of any audits that had been performed.