Tips for Honing the Auditor's Interviewing Skills

Investigative skills are vital to anyone conducting an investigation when misconduct concerns arise; inexperience could lead to costly mistakes.

By John D. Thompson

Wed, February 27, 2008CIO If you stack a pile of papers in front of just about any auditor, he or she will find the proverbial needle in the haystack, especially if you're looking for some missing cash. One area in which many auditors could improve is in their preparation for and execution of interviews with witnesses.

The Planning Phase

First, plan the investigation at the outset. Sit down and consider all the issues before commencing the investigation.

  • Witness intimidation. How will you ensure that witnesses are free from intimidation by wrongdoers trying to interfere with your investigation?
  • Investigative team. Who is going to interview the witnesses? Will you have two interviewers? What characteristics should they have?
  • Time frame. How long is this investigation going to take? You will need to advise people as to when to expect an outcome.
  • Confirmatory memorandum. If someone brings a complaint to your attention, will you want to confirm the elements of their complaint in writing with them? What form should that confirmation take?
  • Relevant documents. Identify and collect all relevant documents.
  • Special investigative techniques. Beyond auditing techniques and witness interviews, what other investigative methods would be fruitful?
  • Interviewee issues. Based on an initial review of the situation and the documents, who should you interview, where and in what order? What are you going to say to the witnesses at the opening of your interview? At the close? Prepare a set of common questions to ensure the same issues are addressed with all the interviewees. It is important to be consistent.
  • Written statements. Are written statements appropriate in this matter? If so, you must become familiar with the process and pitfalls of obtaining such statements.
  • Note taking. In the course of litigation, the investigation process comes under intense scrutiny. Your notes, including thoughts about planning the investigation, can become critical evidence. In considering the above issues, make notes about why certain approaches were or were not taken so that the documentation shows how thoughtful the process was.

Conducting the Interviews

Be prepared to address a variety of issues during the interviews themselves. Failure to address the following issues can lead to legal liability, low employee morale and a failed investigation.

  • General description of the situation. This must be carefully scripted and must not reveal too much. What is the purpose of the investigation? What organization policies are implicated? How serious is this issue?
  • No conclusions reached. Make clear that no rush to judgment has occurred. Do not discuss your opinions or conclusions. Do not divulge information unnecessarily.
  • Assessing demeanor. Do not throw up your hands just because you confront a "he said, she said" situation. Frequently, you can and should make credibility assessments; this can be done by evaluating the witness's demeanor.
  • Questioning techniques. Begin by asking open-ended questions that allow the witness to talk expansively. Then press for details. Details are often important to corroborate or disprove allegations. Identify hearsay and rumor.
  • Confidentiality issues. To the extent possible, mandate that the interviewers keep the contents and facts of the interviews confidential. Advise the interviewees what information you will share about the interview and about the ultimate result of the investigation.
  • Describe the interview process. Outline the investigative process in general, but make no promises as to an outcome.
  • Penalties for noncooperation or providing false information. Remind the witnesses that their cooperation and truthfulness is essential. Again, if the interviewees are employees, explain the potential ramifications of noncooperation or lying.
  • Protection from retaliation. All interviewees must understand that the organization will not retaliate against them for their participation in the investigation. Instruct all witnesses to contact you immediately if anyone takes retaliatory actions.
  • Identify more witnesses and documents. In the course of interviewing witnesses, always press them to identify additional potential witnesses and potentially relevant documents.

audit

Loading...
Security MarketSpace
8 Tactics to Combat Vulnerabilities
This white paper reviews 8 key elements of vulnerability management and provides advice on combating known vs. unknown vulnerabilities. Learn more »
Email and Web Threats Require a Layered Defense
Learn how web threats are changing and how using a layered defense strategy can give you the security you need. Learn more »
Take Fraudsters Out of the Game
Easily identify account-device relationships and get data for in-depth forensic analysis. Learn more »
Mobile Security Landscape
This paper examines the current mobile security landscape, including myths surrounding the risks and threats, and how organizations can establish a solid mobile security strategy. Learn more »
Reducing Energy Costs in Your Data Center
This white paper examines the most common roadblocks to improving data center efficiency. Learn more »
Security convergence equals network security cost savings
Security convergence equals network security cost savings Learn more »
IBM ISS X-Force Threat and Risk Report
Read this Trend and Risk report from IBM® ISS X-Force® to learn statistical information about all aspects of threats that affect Internet security, including software vulnerabilities and public exploitation, malware, spam, phishing, web-based threats, and general cyber criminal activity. Learn more »
 
SPONSORED LINKS
 

Mobile Security: The Essential Ingredient for Today's Enterprise

IDC White Paper: CCM for IT Compliance and Risk Management

Keeping Your Members Safe from Online Scams and Predators

Learn about the growing threat of insider data theft.

See how AT&T can help protect your network.

Webcast: Unleashing the Power of Customer Data

White Paper: 5 Best Practices for Smartphone Support

Global Research: CIOs Weigh In On Virtualization

5 Key Virtualization Management Challenges

The Total Economic Impact of Network Security Intrusion Prevention

Join us at the US-Brazil IT-BPO Summit, on November 10th in New York.

Increase UPS efficiency without sacrificing protection.

Learn how advanced forecasting tools can deliver significant business results for global corporations.

Lower IT Costs with Oracle Database 11g Release 2

White Paper: Visibility and the New Normal of Mobile Work

Taking the Service Desk to the Next Level

Learn about The Information Technology Infrastructure Library.

Top Five CIO Challenges

Streamline IT Costs. Boost Performance with WAN Optimization.

Want to know how you can maximize employee productivity?

Build your 1st app FREE with Force.com

TDWI checklist helps define data readiness for analytics. Download report.

A new fleet of PCs with a total ROI in 10 months. Find your ROI.

eZine: A Roadmap to Reducing IT Complexity

Reduce risk, gain agility. See how Progress can help your business.

White Paper: Managed Security for a Not-So-Secure World

Secure Email and Web-Based Communication from Evolving Attacks

WagerWorks Takes Fraudsters Out of the Game using iovation

White Paper: A Security Blueprint Delivered From within the Network

White Paper: 4 Customer Service Myths

White Paper: Improve Agility with Operational Responsiveness

White Paper: Legacy Tools: Not Built for the Helpdesk

Taking a Seat at the Executive Table: The Reality of Virtualization

White Paper: Next Generation Remote Infrastructure Management

Seven Design Requirements for Web 2.0 Threat Protection

Generation Remote Infrastructure Management - Changing the Paradigm

Cloud-Based Email Management: Opinion Shifts In Favor

eBook: How Can You Make Your People Productive Anywhere?

Achieving Business Agility with Application Grid

Ready to virtualize tier one applications? Check your virtualization maturity.

Seven Ways ITIL Can Help You in an Economic Downturn

Tips for successful virtualization management.

Unified Communications: Thoughts, Strategies and Predictions. Join the discussion

Read the RSA report: Security for Business Innovation

Webcast: Looking to the Cloud for Email and Collaboration Services

64-page prescriptive guide to security, compliance, and IT operations.

Keep your IT expertise up to date. Join the Intel Premier IT Professionals.

A Clear View Toward Virtualization

Virtualization Technology as a Business Solution

The rules of infrastructure management just changed.

 
 
RESOURCE CENTER