Depending on your company’s situation, you may need an outside audit every year — or not at all.