External and internal auditor