External audit and control