5 Guiding Principles to Auditing ERM