Equifax Inc. used a consulting arm of its auditor to certify that its information-security risks were under control — a possible conflict for a company that missed the system vulnerability that gave ...