which of the following sets of information does an auditor usually confirm on one form?