auditor competency