The organisation’s management or the regulator may decide to have an external agency to carry out an independent safety audit. ICAO Doc 9859 reveals: “External audits of the SMS may be conducted by relevant authorities responsible for acceptance of the service provider’s SMS. Additionally, audits may be conducted by industry associations or other third parties selected by the service provider. These external audits enhance the internal audit system as well as provide independent oversight.”