What auditors need to know about ESG issues