The audit must be performed by a qualified auditor who has no conflict of interest in the company being audited. This would mean that the contract manufacturer could not audit himself. But it would be quite acceptable to have an independent third-party auditor carry out the audit on behalf of the QP. It does not have to be carried out by the QP in person.