An accreditation authority that requires an accreditation audit to be performed may –

(a) engage a biosecurity auditor to perform the audit; or

(b) direct the audit target to engage a biosecurity auditor to perform the audit and specify requirements relating to –

(i) the engagement of the biosecurity auditor; and

(ii) the scope of the accreditation audit to be performed.