Audits and assessments should be conducted by individuals or teams with the appropriate expertise and objectivity. This could include internal audit teams, external auditors, or specialized consultants. It’s important to ensure that those conducting the assessments have no conflicts of interest and possess a thorough understanding of the areas being evaluated.