Cybercriminals: the 'auditors' you never hired

Every organisation gets audited. The question is who does the auditing.