Regulation, Asymmetric Information, and Auditing