Despite inevitable personal risk, auditors owe their organizations accurate information about project status, especially bad news, in the interests of halting software project runaways. Management owes them the courtesy of listening.