Lessons Auditors Ignore at Their Own Risk