Auditor checks adherence to particular rules. You can assert nefarious activities at higher level, but it's likely out of job scope to do something about it