The auditor's first course of action when an illegal act is uncovered should be to immediately notify the appropriate authorities, including but not limited to the police, and for publicly held companies, the Securities and Exchange Commission. （ ）