It does show a lot of “errors” and not following the rules.
What I’m seeing right now is that there was definitely some kind of coverup (deletion of logs remotely the day before the audit). So, I guess they cleaned up everything in all the time they had to make it look somewhat legit.