(a) An audit must be conducted by an entity or individual with relevant auditing or evaluation experience and is external to ORR.

(b) All auditors must be certified by ORR, and ORR must develop and issue procedures regarding the certification process within six months of December 24, 2014, which must include training requirements.

(c) No audit may be conducted by an auditor who received financial compensation from the care provider, the care provider's agency, or ORR (except for compensation received for conducting other audits) within the three years prior to ORR's retention of the auditor.

(d) ORR, the care provider, or the care provider's agency must not employ, contract with, or otherwise financially compensate the auditor for three years subsequent to ORR's retention of the auditor, with the exception of contracting for subsequent audits.