. "Internal control is also effected by individuals external to the organization, such as in service providers or third parties performing periodic monitoring of controls." . . .