Where licensees outsource part or all of their internal audit function, the outsourcing arrangements must provide for an adequate level of scrutiny of the licensees. A licensee cannot outsource its internal audit function to its external auditor.