auditor requirements