Which of the following best describes how an auditor should proceed when a deficiency similar to deficiencies found during audits at other companies is uncovered?
A.
Cite as many of the other examples as necessary to help the auditee understand what corrective action is required.
B.
Provide the auditee with the names of companies from previous audits which could be contacted for advice.
C.
Identify the current deficiency in a different way in order to avoid the appearance of a conflict of interest.
D.
Document the current deficiency without making any reference to the similar deficiencies found in other audits.
An auditor must protect confidentiality, objectivity, and professional integrity. When a deficiency resembles issues observed in other organizations, the auditor should document only the current audit evidence and avoid referencing confidential information from previous audits. Citing other companies’ examples or providing names would violate confidentiality and could damage trust in the audit process. Changing how the deficiency is identified to avoid conflict of interest is also inappropriate because audit findings must be factual, clear, and based on objective evidence. The correct approach is to document the current deficiency using evidence from the auditee’s own processes, records, interviews, or observations. This maintains independence, protects prior audit information, and ensures the finding is valid and defensible.
================
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit