Internal employees can be formed into IS audit teams within organisations. If these teams are not kept sufficiently separate from other processes, the IS auditors may be influenced or biased. This is particularly the case if members of the IS audit team are or have been involved in the planning or implementation of the ISMS in question.