ask the auditor to read you the shall. When they can't, just state "that is a really good opportunity for improvement. I will have to discuss this with top management" and drop it. If the auditor does not drop it, THEN I would ask the auditor to call their manager. Ask their manager where the shall is. After going that far, kicking their behind out of the building is justified.