They will likely have recommendations to improve internal controls. They do need to obtain a good understanding of the internal controls in place. But this is not what will make the audits last a whole year. If the audits last a whole year, it would cost a lot of money, haha