What is an external auditor?