auditor responsibility