What an auditor does