Tips for Honing the Auditor's Interviewing Skills

Investigative skills are vital to anyone conducting an investigation when misconduct concerns arise; inexperience could lead to costly mistakes.

By John D. Thompson

Wed, February 27, 2008CIO If you stack a pile of papers in front of just about any auditor, he or she will find the proverbial needle in the haystack, especially if you're looking for some missing cash. One area in which many auditors could improve is in their preparation for and execution of interviews with witnesses.

The Planning Phase

First, plan the investigation at the outset. Sit down and consider all the issues before commencing the investigation.

  • Witness intimidation. How will you ensure that witnesses are free from intimidation by wrongdoers trying to interfere with your investigation?
  • Investigative team. Who is going to interview the witnesses? Will you have two interviewers? What characteristics should they have?
  • Time frame. How long is this investigation going to take? You will need to advise people as to when to expect an outcome.
  • Confirmatory memorandum. If someone brings a complaint to your attention, will you want to confirm the elements of their complaint in writing with them? What form should that confirmation take?
  • Relevant documents. Identify and collect all relevant documents.
  • Special investigative techniques. Beyond auditing techniques and witness interviews, what other investigative methods would be fruitful?
  • Interviewee issues. Based on an initial review of the situation and the documents, who should you interview, where and in what order? What are you going to say to the witnesses at the opening of your interview? At the close? Prepare a set of common questions to ensure the same issues are addressed with all the interviewees. It is important to be consistent.
  • Written statements. Are written statements appropriate in this matter? If so, you must become familiar with the process and pitfalls of obtaining such statements.
  • Note taking. In the course of litigation, the investigation process comes under intense scrutiny. Your notes, including thoughts about planning the investigation, can become critical evidence. In considering the above issues, make notes about why certain approaches were or were not taken so that the documentation shows how thoughtful the process was.

Conducting the Interviews

Be prepared to address a variety of issues during the interviews themselves. Failure to address the following issues can lead to legal liability, low employee morale and a failed investigation.

  • General description of the situation. This must be carefully scripted and must not reveal too much. What is the purpose of the investigation? What organization policies are implicated? How serious is this issue?
  • No conclusions reached. Make clear that no rush to judgment has occurred. Do not discuss your opinions or conclusions. Do not divulge information unnecessarily.
  • Assessing demeanor. Do not throw up your hands just because you confront a "he said, she said" situation. Frequently, you can and should make credibility assessments; this can be done by evaluating the witness's demeanor.
  • Questioning techniques. Begin by asking open-ended questions that allow the witness to talk expansively. Then press for details. Details are often important to corroborate or disprove allegations. Identify hearsay and rumor.
  • Confidentiality issues. To the extent possible, mandate that the interviewers keep the contents and facts of the interviews confidential. Advise the interviewees what information you will share about the interview and about the ultimate result of the investigation.
  • Describe the interview process. Outline the investigative process in general, but make no promises as to an outcome.
  • Penalties for noncooperation or providing false information. Remind the witnesses that their cooperation and truthfulness is essential. Again, if the interviewees are employees, explain the potential ramifications of noncooperation or lying.
  • Protection from retaliation. All interviewees must understand that the organization will not retaliate against them for their participation in the investigation. Instruct all witnesses to contact you immediately if anyone takes retaliatory actions.
  • Identify more witnesses and documents. In the course of interviewing witnesses, always press them to identify additional potential witnesses and potentially relevant documents.

audit

Loading...
Security MarketSpace
Practical Approaches for Securing Web Applications
Enterprises understand the importance of securing web applications to protect critical corporate and customer data. What many don't understand, is how to implement a robust process for integrating security and risk management throughout the web application software development lifecycle. Learn more »
An Executive's Guide to Web Application Security
Since so many Web sites contain vulnerabilities, hackers can leverage a relatively simple exploit to gain access to a wealth of sensitive information, such as credit card data, social security numbers and health records. It's more important than ever to examine your Web application security, assess your vulnerability and take action to protect your business. Learn more »
Web Application Vulnerabilities
Security managers may work for midsize or large organizations; they may operate from anywhere on the globe. But inevitably, they share a common goal: to better manage the risks associated with their business infrastructure. Increasingly, Web application security plays a significant role in achieving that goal. Learn more »
Retooling IT for a Mobile Workforce
Check out this research note from IDC for guidance. Learn more »
Today's Risky Data Environment
This paper explains how an IT and security service provider can provide a practical, manageable and reliable solution. Learn more »
Business Continuity - Are You Always Open for Business?
This Oracle business brief explains how mid-sized can improve performance by creating an IT infrastructure that makes working faster, easier and more effective. Learn more »
 
SPONSORED LINKS
 

Making Consumer Two-Factor Authentication Simple and Cost-Effective

Mining the Cloud to Ease the Enterprise Compliance Burden

Solve Five Key IT Security Challenges with Cloud-Based Authentication

White Paper: Managed Security for a Not-So-Secure World

Secure Email and Web-Based Communication from Evolving Attacks

WagerWorks Takes Fraudsters Out of the Game using iovation

White Paper: A Security Blueprint Delivered From within the Network

Return on Information: Google Enterprise Search pays you back

Cut Costs & Green Your IT Operations with PC Power Management

White Paper: 4 Customer Service Myths

White Paper: Improve Agility with Operational Responsiveness

White Paper: Legacy Tools: Not Built for the Helpdesk

Taking a Seat at the Executive Table: The Reality of Virtualization

White Paper: Next Generation Remote Infrastructure Management

Seven Design Requirements for Web 2.0 Threat Protection

Increase UPS efficiency without sacrificing protection.

Learn how advanced forecasting tools can deliver significant business results for global corporations.

Lower IT Costs with Oracle Database 11g Release 2

White Paper: Visibility and the New Normal of Mobile Work

Taking the Service Desk to the Next Level

Learn about The Information Technology Infrastructure Library.

Return on Information: Google Enterprise Search pays you back. Get the facts.

VMware. The source for Business Infrastructure Virtualization.

ShoreTel tells businesses to untangle from competitors' complexity and turn to its brilliantly simple UC solution

Top Five CIO Challenges

Authentication as a Service by Forrester Research

Cloud-Based Authentication for Next-Generation Extranets

Mobile Security: The Essential Ingredient for Today's Enterprise

IDC White Paper: CCM for IT Compliance and Risk Management

Keeping Your Members Safe from Online Scams and Predators

Learn about the growing threat of insider data theft.

Upgrading to VMware vSphere with vWire

Maximizing website Return on Information with high-quality search

See how AT&T can help protect your network.

Webcast: Unleashing the Power of Customer Data

White Paper: 5 Best Practices for Smartphone Support

Global Research: CIOs Weigh In On Virtualization

5 Key Virtualization Management Challenges

The Total Economic Impact of Network Security Intrusion Prevention

Generation Remote Infrastructure Management - Changing the Paradigm

Cloud-Based Email Management: Opinion Shifts In Favor

eBook: How Can You Make Your People Productive Anywhere?

Achieving Business Agility with Application Grid

Ready to virtualize tier one applications? Check your virtualization maturity.

Seven Ways ITIL Can Help You in an Economic Downturn

Tips for successful virtualization management.

AT&T Synaptic Storage as a Service. Expand on demand

Trend Micro ranked #1 against real-world malware. Read more.

Webinar: Jump-start your in-house e-discovery with Ringtail QuickCull from FTI Technology

Streamline IT Costs. Boost Performance with WAN Optimization.

 
 
RESOURCE CENTER