The auditor should refer to agency-specific requirements for more information.
The auditor should refer to the requirements if they have questions.
The auditor should not have to refer to the requirements if they have questions.