Pragmatically, a regular full audit by an external entity might produce interesting results. Who is their auditor? That might be a pertinent detail to provide.