Evaluating internal/external audit services and relationships