In many things you need to be accredited by a third party according to some standards and they audit you periodically. They demand that you have shitload of plans, programs, reports, logs and other paperwork required by those standards.

Auditors mostly only care that the paperwork exists and only focus on the contents on key aspects that are usually clear and short.