After having dealt with some audits (although not this exact topic), in general they followed the same format. "Assert that we do the thing we claim to be doing". So if the thing they claim to be doing is a low bar, the audit means nothing. If they dont release any evidence, or a report of what they were ascertaining it means very little IMO.
I can't remember if the employee released any evidence with her claims either though, but in general I'd prefer my odds with assuming her story is closer to the truth against a company which has had other mishaps recently, underpinned by evidence. All of which they tried to brush under the carpet.