Developing a CECL audit program to satisfy internal and external auditors and justify process