IT security professionals might think of auditing as a pain, but some are actually cheating to get audits passed, according to a study released Wednesday.