In reviewing the work of an external service provider, the CAE evaluates the adequacy of work performed, which includes sufficiency of information obtained to afford reasonable basis for the conclusions reached and the resolution of exceptions or other unusual matters