Internal auditors, external auditors, or other qualified persons who are responsible only to the board of directors, may conduct an audit.