What are the critical points to consider when conducting investigations?

This week our colleagues have been discussing what are the critical points to consider when conducting investigations.

It is not intended to be an exhaustive list but gas been generated as a result of experienced fraud and forensic auditors.

It is difficult today to avoid news about allegations and subsequent investigations. First, it was a slew of high profile allegations about sexual misconduct—which continues. More recently, it’s about abuse of power in the government. And rarely a day goes by without some news of a financial fraud, bribery, or other scandal at companies around the globe. What we should all note from the news is that a failure to perform an appropriate investigation is a serious source of risk to any organization.

Here are five points to consider when an allegation of misconduct surface and an investigation is necessary to get to the bottom of it:

1.It is critical for any individual within the organization to be able to report suspected inappropriate behavior without fear of retaliation.

The apparent effort by members of the U.S. government to identify a whistleblower and then paint him or her as a political operative is unforgivable and probably illegal (these federal employees are protected by law).

Unfortunately, many people do not come forward because there is a credible fear—justified by several real life examples—of retaliation.

Here’s an example of just one: One woman who reported suspected wrongdoing by her manager to her company’s ombudsman, as required by company policy. However, her manager had started a disciplinary process against the whistleblower, triggered by that person’s refusal to perform what she believed to be corrupt acts demanded by the manager. The ombudsman was a senior member of the legal department who was advising the manager on the disciplinary process; he refused to open, let alone act on, the whistleblower’s complaint. Unfortunately, the whistleblower was fired, her allegations were never investigated, and her personal attorney failed to advise her properly on how to sue for damages. (Sadly, the only protection under federal law is when the whistleblower reports the suspected activity to the SEC. No protection against retaliation is provided when allegations are reported to the company’s ombudsman or hotline, following company policy.)

We also think about the women who have alleged inappropriate sexual activities by Supreme Court judges during the confirmation proceedings. They were not only identified by name but were publicly ridiculed.

These allegations, if there was to be a fair process, should have been conducted quietly by professional investigators with an open mind. They should not have been conducted in public. Frankly, as I look at the current impeachment inquiry involving the President, I have to wonder whether the process is appropriate. It should be much quieter and performed by objective professionals.

2.It is also critical that individuals outside the organization are able to report suspected wrongdoing by another organization’s employees.

We can recall a number of cases where vendors and customers gave us information that we investigated and determined there had been fraudulent acts. (The assessment of fraud is a legal determination, based on facts that we provide counsel.)

Few organizations, in our experience, have processes where vendors, customers, and others can report suspected inappropriate behavior by an employee of the company. When complaints are made, they generally end up in the wrong hands because the third party doesn’t know whom to tell.

3.Every allegation of wrongdoing should be considered and evaluated for a potential investigation. Before launching a formal investigation by any team, we look to see if there is predication. That is typically based on two questions, explored below.

One: If the allegation is true, would the actions represent a violation of law, company policy, or desired behaviors?

If not, we still consider whether it would be appropriate to conduct further inquiries; sometimes, the whistleblower did not explain the situation adequately and we have our suspicions.

If yes, then we determine who is responsible for the preliminary investigation, which is a process to see if a formal investigation should be opened. Sometimes it is internal audit, sometimes HR, and sometimes it could be another function like physical security or legal.

Two: Is there sufficient information and evidence that the allegation might be true?

Sometimes, we can fairly quickly determine that it is without foundation, in which case we document that and close the case.

There have been times where the allegation was too vague to investigate. If we can contact the complainant, we will try to elicit more information. If not, we flag the complainant, keeping it open and waiting to see if we receive more information at a later date.

4.All investigations should be conducted by trained (and certified, when possible) objective professionals.

Investigators (including myself) were either certified fraud examiners or had received appropriate formal training in investigations, interviewing, and interrogations. The investigation is to uncover related facts. Interpretation of those facts is a management function with advice from legal counsel. It is very easy, too easy, for investigators to form opinions that bias and taint the investigation. Every target of an investigation must be treated with respect and dignity throughout the investigation.

5.Internal audit should consider a periodic review to ensure all of the above and provide assurance to top management and the board that the allegation and investigation processes are appropriate.

Where internal audit itself is responsible for the whistleblower hotline or related processes, or investigating allegations, they should consider engaging a third party to perform a review and report the results to the board.

Following these five key points won’t ensure that every investigation goes smoothly, but it will go a long way to ensuring that they are carried out professionally, fairly, and with the best intentions at getting to the source of the problem and uncovering the truth.

Audit International are specialists in the recruitment of Auditors and various Corporate Governance Professionals including Internal Audit, Compliance, IT Audit, Data Analytics etc across Europe and the US.

If you would like to reach out to discuss your current requirements, please feel free to reach us on  Germany-  0049 30217 82920 or Switzerland 0041 4350 830 59

1125 total views, 1 today