I wonder if you should try to use the FIO act to get ahold of the first audit that they claimed was incomplete. Given the nature of information given in the complete audit, I think there is reason to suspect that information could have been deleted or altered from the audit they deemed unsatisfactory. There should be no reason to not release it now, since any incomplete or inaccurate information should be correct in the final version. If I were to file a request, I would ask for any instructions given on the first audit, any email or tranmissions between them company and the department, the incomplete version, and then any emails or transmissions given to the company that finished the final version. I bet they try to refuse to give it up, but I think there is is sufficeint grounds to be suspect of what transpired, and if nothing else, the waste of money by the department in paying off the first company.