251. Is internal auditor allowed to access SSP