Direct answer
An audit is complete when root causes, scope, impact, confidence, owner and verification are clear—not when a crawler export is delivered.
Practical steps
- Define systems and samples.
- Collect multiple evidence sources.
- Validate root causes.
- Prioritize and assign.
- Retest deployed behavior.
Common mistakes
- Unbounded scanning.
- Score theater.
- No acceptance criteria.
Limitations
- Samples can miss edge cases.
- Private data may change priorities.
Primary sources
- Search Engine Optimization — MDPI; 2021-02; 2026-08-14.
- Web Content Accessibility Guidelines (WCAG) 2.2 — W3C; 2024-12-12; 2026-08-14.