The IBR must be reviewed by the licensee's external auditor, appointed in accordance with Module AA, or by other qualified persons as directed by the CBB.