Para. A/11.2.5 requires the CSO to arrange for internal audits and reviews of security activities. Para. B/1.12 states that the Company and ship security officer should monitor the continuing relevance and effectiveness of the plan, including the undertaking of internal audits.