Yep, I’m involved in the technology part of the audit at work.
This is where a kid who looks like he wouldn’t have the experience to get a job in our department comes in and asks us probing questions designed to give him some way to report us as failures. And our particular auditor mentioned a few times that he also does some security consulting on the side (subtle, no?).
I suppose he actually wasn’t too bad and he did seem to know what he was talking about, but still, that’s how I feel about audits.