In presenting the results of those tests, auditors should report fraud, illegal acts, other material noncompliance, and reportable conditions in internal control over financial reporting.
Auditors should respect the confidentiality of their tests no mater what they find.