External controls and audits