The three key criteria for evaluating business processes in audits are regularity, security, and efficiency. These ensure that workflows comply with regulations, minimize risks, and use resources effectively. Internal audits identify deviations through target-actual comparisons and suggest improvements to support governance, risk, and compliance.