“what role for the regulator, director, and auditor?”