an auditor has a duty to