Internal or External Auditors or Both?
Business Continuity Plan Audits can be done by internal or external individuals. There is value in each approach. In either case, the person(s) conducting the audit should be competent, impartial, and objective. When internally done, the auditor should not be from the group and should not be responsible for any of the activities being reviewed [...]