6.4.1 Internal and External Audit