Correct. Management is responsible for the truthful facts of the audit. A consultant really puts all the info into light; management signs off on it.

Just like in engineering; I could be a consultant with high power knowledge, yet a licensed, professional engineer has to sign off on the document. Most top level engineers are not licensed.