Disclosure of fraud to parties other than a client's senior management, those charged with governance, or its board of directors ordinarily is not part of an auditor's responsibility. However, to which of the following outside parties may a duty to disclose irregularities exist?