Per the GAO standards, an auditor's report
a. Must disclose instances of material inefficiencies
b. Can exclude from versions that will be made public information that would be harmful to national security
c. Must be retained by the auditor for a period no less than 10 years
d. Must explicitly indicate that the individual auditors on the engagement have satisfied the standards' CPE requirements