Yes I am auditing controls and those controls should be in procedure.
Same here...our policies have few controls in them, they are focused on WHAT we are doing. The procedures are HOW we do it and contain specific controls.
Not all areas have written procedures, but the majority do now. I spent the first several years auditing with "create formal written procedures documenting controls" as a recommendation.