Unless otherwise exempted in writing by the CBB, investment firm licensees may not outsource their internal audit function to the same firm that acts as their (external) auditors.