Legislative auditor to investigate use of company at center of security concerns