Security audits should be conducted by qualified professionals who have expertise in both information security and epidemiology. This may include internal staff with specialized training or external consultants who bring an objective perspective. In some cases, regulatory bodies may also conduct audits to ensure compliance with standards.
