https://itauditsecurity.wordpress.com/2010/12/06/more-on-hating-auditors/