In some circumstances, auditors should report fraud and illegal acts directly to parties external to the audited entity.
Sometimes auditors should not report cases of fraud to outside parties.
Auditors should always report fraud, to everyone!