If the department chooses not to perform an audit, the recipient must select a qualified independent third-party auditor to conduct the audit.