[360] 29 competent authority, carry out an assessment, whether by means of a security audit or otherwise, of the compliance by an operator of essential services with its obligations under Regulations 17 and 18 and for that purpose may appoint an independent person or auditor to carry out the assessment on its behalf. (b) The competent authority referred to in Regulation 8 may, in relation to a relevant digital service provider, carry out an assessment, whether by means of a security audit or otherwise, of the compliance by a relevant digital service provider with its obligations under Regulations 21 and 22 and for that purpose may appoint an independent person or auditor to carry out the assessment on its behalf. (2) A competent authority referred to in paragraph (1) may request an operator of essential services or a relevant digital service provider, as the case may be, to provide the competent authority with— (a) the information necessary for that competent authority to assess the security of the network and information systems of the operator or provider, as the case may be, including documented security policies, and (b) evidence of the effective implementation by the operator or provider, as the case may be, of security policies including the implementation of any recommendations made on foot of a security audit or other assessment. Appointment of authorised officers 28. (1) (a) The competent authority referred to in Regulation 7(1) may, in relation to those sectors in respect of which it is designated as the competent authority, appoint such and so many persons as it thinks fit to be authorised officers for the purposes of any or all of these Regulations and of ensuring compliance by operators of essential services in those sectors with their requirements. (b) The competent authority referred to in Regulation 8 may appoint such and so many persons as it thinks fit to be authorised officers for the purposes of any or all of these Regulations and of ensuring compliance by relevant digital service providers with their requirements or, where Regulation 24 applies, of assisting a competent authority in another member state in accordance with that Regulation. (2) A competent authority referred to in paragraph (1) may terminate the appointment of an authorised officer appointed by the competent authority, whether or not the appointment was for a fixed period. (3) An appointment as an authorised officer ceases— (a) if it is terminated under paragraph (2), (b) if it is for a fixed period, on the expiry of that period, or