In some circumstances, auditors should report fraud and illegal acts directly to parties external to the audited entity.
Sometimes auditors should not report cases of fraud to outside parties.