Auditing is often cited as playing an important role in managing agency-related costs and, accordingly, being integral to the sound functioning of capital markets. There may, however, be more to the attest function than simply a technical rational practice. By virtue of relying heavily on claims to technical expertise, professionalism, prudential judgement and public confidence auditing is both a source of legitimacy for organisations while, paradoxically, dependent on claims to legitimacy for its own continued existence. From this perspective, recent regulatory developments purportedly enacted to increase arms length control over the profession may not only be about improving perceived audit quality and practice but also about ensuring continued faith in the well-established 'rituals' of the assurance function. A reporting duty imposed on South African external auditors, akin to whistle-blowing, is used as a case study to explore this perspective. In doing so, this paper contributes to the scant body of interpretive research on auditing simultaneously offering one of the first insights into auditing regulation form an African perspective.