When the internal audit activity outsources some of its functions to an external service provider (ESP), Responsibility for the internal audit activity may be outsourced. The IIA's Standards must be followed by the ESP. An ESP associated with the client is appropriate if the relevant guidance is followed. Oversight of the internal audit activity may be outsourced