In presenting the results of those tests, auditors should report fraud, illegal acts, other material noncompliance, and reportable conditions in internal control over financial reporting.
These tests rarely turn up any evidence of illegal acts.