Who audits COA? Is COA exempted from being audited?