• “everything is wrong until proven correct” is too harsh

  • “it is probably correct, but we will check anyways” is just about right

  • if the company wants to fraud the auditors, they can