Loss underreporting and the auditing role of bank exams