which principle ensures auditing processes are managed by someone other than the employees whose activities are being audited?