Employees may try to conceal security issues because they are afraid their errors will be discovered during an audit. This might convey an inaccurate picture of the status quo.