'Audit' is not something where you turn in the keys to your locker unconditionally to some random stranger who just walks in making demands. Audits are based on pre-determined and documented criteria, with the participation and supervision of responsible in-house officials. They just check if everything is in order. Auditors are rarely given unsupervised access to any data - especially to sensitive information. Meanwhile, the auditors themselves have to be held to a high level of integrity - elimination of conflicts of interest being the most important. This is a sham audit if it can be considered to be one at all.