Five years after SOX, business as usual for auditors