7. Auditing tools and code review