For a one-person audit function, a memorandum stating policies and procedures would be sufficient. This is because a single auditor does not require the extensive documentation that a larger team would need. A memorandum can succinctly cover the necessary guidelines and is a practical solution for a one-person audit function.