A CSR audit can be conducted by internal auditors, external consultants, or a combination of both. Internal auditors are employees of the organization who have a deep understanding of the company's operations, while external consultants bring an objective perspective and specialized expertise.