Am I being audited? Service verification audits versus on-site audits