Discuss whether internal security audits are enough for an organization or do they need to perform external audits as well. Also discuss in which scenarios the external audits are mandatory to perform.
