The CBB would normally expect larger investment firm licensees to maintain the internal audit function within the organisation (or at least to be provided from within the licensee's group, where relevant, providing this doesn't impair the level of internal audit scrutiny applied to the licensee). The CBB will however consider allowing small investment firm licensees to outsource part or all of their internal audit function to third party providers.