auditors are not responsible for reporting  on irregulated entities overall compliance with rules with which it is required to comply, that's unlike local government, nor are they required to conduct there work in such a way that there is reasonable certainty that they will discover breaches.