Security audits can be conducted by internal audit teams within the healthcare organization or by external auditors who specialize in healthcare security. These auditors should have expertise in both nursing practices and cybersecurity to effectively evaluate the unique security needs of a healthcare setting.