200.508 Auditee responsibilities