Internal audit framework led by an external provider or management department

A framework in which internal audits are conducted without an independent internal audit department, either by an external provider or under the direction of a management group. The focus is on who performs the internal audit function and how its independence is ensured.