You can lie to these auditors, but you can't lie to pentesters. These people on the other hand are designed to probe your network from the outside.