Why internal auditors are ‘the good guys’