5. Perform audits on software development processes and practices at least once every two years.