logoalt Hacker News

xorcist04/23/20251 replyview on HN

I have taken part in audits for several organizations over the years, and I can assure you that's not how audits are done at all.

In fact, should the auditor find there is a way for them to access sensitive data without it being logged, they will flag it immediately. That would be the case even under simple financial regulation.

There is absolutely the risk that the people you audit will lie to you or present you with false data. In practice that's not common, because they stand to at the very least lose their jobs. It could also be illegal. Not worth it.


Replies

jiggawatts04/24/2025

A normal audit, sure. This isn’t that. This is the prison guards flipping the mattress looking for contraband.

All of the public complaining is by staff that don’t understand their new position in the pecking order.

There is a King in charge and he cares not for the wailing of the petty nobles.

show 1 reply