Need to regulate internal auditor