Statutory audits are legally required, while internal audits are optional but help improve governance and risk control.