I’m trying to understand the audit process better. Can someone clarify who exactly performs the audit in a company? Is it always done by an external firm, or can it be handled internally? Also, are there any specific qualifications or certifications that an auditor must have?