What are the best practices for conducting internal audits to ensure regulatory compliance?