reliance by internal audit on other assurance providers