What to consider when auditing revenue recognition implementation