Unless otherwise exempted in writing by the BMA, investment firm licensees may not outsource their internal audit function to the same firm that acts as their (external) auditors.