but someone is supposed to audit these things quarterly