The internal audit is a requirement from the ISO 27001 standard.