Where are the gaps? Auditors now analyzing clients’ COSO transition