Why should you not just remove “failing” or “non-conformance” items from a scope to pass an internal audit?
