Why auditors care about your business’s cybersecurity