Internal auditors could be in-house or an outsourced entity; except for banks and certain Non-banking Finance Companies, risk-based Internal audit (IA) is required to be conducted by in-house internal ...