|
Avoiding Auditee Games One part of an internal auditor's life is the eventual (in some cases
constant) contact with an auditee who plays some type of game. The reasons for
auditee games are varied, but mostly they occur because the auditee believes (or
knows) that the audit will not go well. Despite what we say, and do, most
auditees equate a nonconformance with failure of them, or their department.
Senior management often exacerbates the problem by placing internal audit
performance in manager's overall performance evaluation. Even when these
conditions are not present, internal audits still take some resources
away from the department. If nothing else, the manager must take time
from his, or her busy schedule to meet with internal auditors. The end
result is that lower and mid-management would really avoid the audit
altogether. Many of them resort to actions and activities that inhibit
the auditing process. We call these actions "auditee games".
That is, games auditees play to delay, disrupt or even avoid internal
audits.
The following are typical examples of auditee games. They are by no means the
only games, just a sample of the most common.
- We're not ready
- Key people missing
- "Houston, we have a problem"
- Shell game
- I'll tell you what I think you want to know
Let's look at each of these in detail.
We're Not Ready
This is perhaps the most used auditee game. The auditee is not
prepared to provide the resources and the evidence the auditor needs for
the audit. Audit schedules should be publicized well in advance.
Auditees should know when they are going to be audited (right to the
hour). If neither of these two things occur, then we cannot blame the
auditee if he or she is not ready for the audit. If they are aware of
the audit time and date, then they have no real excuse.
Key People Missing
This is related to the "we're not ready" game. In this
situation, the individuals you need to interview all just happen to be
out of the area during the audit time. Now, we all know that emergencies
can, and will occur, but I've seen instances where key management
personnel are on vacation during the audit! If when the audit is scheduled,
a key person has a
vacation day, then the audit should be rescheduled. At a minimum, the
auditor should be informed of the absence of key individuals at that
time. Some
of the other excuses have been just plain lame; the manager that suddenly
must go visit a vendor, or customer; the manager that needs to go to the
warehouse to determine stock levels. In one case, all the managers and
supervisors were called to a meeting at the start of an audit.
"Houston, We Have a Problem"
One thing about management, they always seem to be in a
crisis...perhaps they are. Many times management is busy with rush jobs,
absenteeism, equipment breakdowns, etc. And as you can guess, these
so-called "fires" tend to occur around internal audits. When
the audit team arrives, the place is to busy too be audited.
Shell Game
There are many versions of this game, none of which can be
"innocent". Basically, the shell game involves
attempting to hide a nonconformance by hiding records, product or
documentation. In one case, I heard that the auditee attempted to hide
uncontrolled documents in the drop ceiling. The panel gave way under the
weight of the binders and hit one of the auditors in the head. She
wasn't injured, but added a nonconformance for workplace environment to
the 4.5 nonconformance.
There is also the reverse shell game. This is where there is not
enough documentation, so the auditee attempts to shuffle the same copies
of procedures or work instructions among several locations. In one large
plant, the auditor noticed the same person handing the procedures to the
auditee at each stop. Each time he handed over the book, the individual
looked more and more winded. After a while, the auditor "accidentally"
left a sticky note in the binder. At the next stop the auditor found his
own note, and the auditee confessed.
I'll Tell You What I Think You Want To Know
When interviewing an individual, it is not uncommon for them to try
to give you the answers they think you want to hear. Although they can be
intentionally attempting to mislead you, usually they are only trying to
be helpful. Bear in mind sometimes they may be trying to hide something,
other times they might be trying to make you think things are worse than
they really are.
Related to this is the opposite, where the auditee tries to confuse,
or impress, you with techno-babble. Using jargon, acronyms, and
abbreviations that you might not be familiar with, the interviewee
attempts to bury you in confusion. Hopefully, they think, you will be too embarrassed to
ask for clarification, and the auditee can point out that the answer
should have been clear in their last statement.
What is an auditor to do?
The auditor's best response occurs prior to the audit. Make sure that
all key people know of the upcoming audit. One good way to do this is to
copy all key players on all correspondence. If your organization has
email, this is done quite easily. Once the game occurs, document it.
Make sure the Management Representative receives a copy of the
documentation, also send a copy to the area manager's supervisor. If it
happens a second time, escalate the documentation to the
"management with executive responsibility". During the audit,
do not telegraph what you want to know. Avoid asking leading questions.
Also asking the same question in different formats can discover if the
answer is honest. If you are unsure of the answer, ask. Let them know,
that you want clarification not only because you are unsure what they
are saying, you want to make sure they know what they are saying!
Auditee games could be a symptom of a greater problem. In many shops
where internal auditors play these games at almost every audit, you will
probably find that management views internal audits as a bother.
Internal audits are something that they must endure in order to maintain
their registration. Their registration is something they must put up
with to keep in business. They resent the intrusion in their business of
the entire process. If this attitude carries up to the executive
management, then all is lost. Your best bet is to either resign as an
internal auditor, or update your resume. You will be considered
part of the problem, and your life will become difficult...at best!.
Most companies are not like that. In most companies that have
problems, the attitude is isolated to a few individuals. Sometimes the
best way to deal with them is use Major Nonconformances to 4.1 to bring
the problem to the attention to their superiors. But, there may be a
better way. We discuss this briefly on The Back
Page. We will also be focusing on how to turn management hearts in
upcoming issues.
Summary:
When attempting to avoid auditee games, take into account that not all
auditee games are deliberate. In some cases, situations arise that are beyond
the auditee's control that might, or might not appear to be games.
Should a governmental regulator arrive announced, the auditee may have
to divert auditing resources to the regulator. The prospect of shutting
down a customer assembly plant, might also demand all of the manager's
attention as well. Some of the above things could very well be
honest and completely innocent circumstances. Auditors need to develop
discernment, so they can distinguish what is real, and what is
deception.
Do you have any experience of auditee games you wish to share? Email
them to auditeegames@internal-auditor.com.
I will post them on the website, as they come in. We can all learn, or
maybe laugh from your experiences.
As
always...Good Auditing! top
of page |
|
Copyright notice: internal-auditor.com is
fully protected under US and International copyright laws. Copying, or
re-transmitting all, or any part of internal-auditor.com is expressly forbidden
without prior written consent from Ruth Ellen Carey Communications.
internal-auditor.com is a publication of Ruth Ellen Carey Communications.
Comments suggestions, complements and complaints should be directed to:
David Bradley, Industrial
Communicator
Ruth Ellen Carey Communications
3698 Heathwood, E.
White Lake, MI 48383 USA
brad@rec-communications.com
|
For subscription information, contact:
Subscribe
Ruth Ellen Carey Communications
3698 Heathwood, E.
White Lake, MI 48383 USA
|
Because this site uses information from
many different sources, it must be pointed out that any advice, tips,
information, etc., provided should be regarded as opinion and not fact! What
works well for one company may be a disaster for another. Also, what one
registrar, or auditor may allow, another may not. As always, reflect on what you
read, see if it fits into your own quality system, and if it conflicts with your
auditor...you've got to make a decision
top of page
|