GAGAS require auditors to report fraud or illegal acts directly to parties outside the audited entity in two circumstances, as discussed below.
There is a discussion on GAGAS' requirements for auditing reports.