audit and auditor rules