MartyOwns
thank you shero
- Apr 1, 2007
- 24,707
- 19,449
I don't mind Audits.
It means I don't have to work and get to sit in a conference room and answer questions all day
I have only been involved in technical audits. But they typically have focused on Security, Personal Privacy, Segregation of Duties and that sort of stuff...Most auditors have no idea about the nitty-gritty technical aspects so they essentially rely on Standard Operating Procedures documents that my team writes...and it basically comes down to are you doing what you say you are doing.
And they will always find something...Always! No matter how tight your documentation and processes are... Auditors will ALWAYS finds something to write about in their Final reports.
22 years of playing this game I have never gone through an audit without a "finding" - Some years they have written a "finding" with a corrective action plan only to call the very exact item that they recommended as "finding" in following years.
I used to get frustrated by it until I realized it is a great "make work" activity that gets a lot of attention from very high-level people.
If done right, it becomes a big "lets pat ourselves on the back" exercise that gets presented to higher ups in a nice neat report
is it kind of like this?