(1) The director-general may require that a biosecurity auditor carry out an audit (a biosecurity audit ) in relation to an authorisation-holder, for 1 or more of the following purposes:
(a) to assess an authorisation-holder's eligibility to hold their permit, registration or approval;
(b) to assess the authorisation-holder's compliance, or capability of complying, with this Act;
(c) to identify ways to improve the authorisation-holder's compliance with this Act.
(2) A certifier authority or auditor authority—
(a) must require a biosecurity audit of a person the authority has approved as a biosecurity certifier or biosecurity auditor if requested in writing by the director-general; and
(b) may otherwise require a biosecurity audit of a person the authority has approved as a biosecurity certifier or biosecurity auditor.