Types of audit evidence explained