Skip to main content
The Workplace

Return to Answer

added 10 characters in body
Source Link
Lucas Kauffman
Lucas Kauffman
  • 1.4k
  • 16
  • 20

Working as an IT auditor myself, there are a few considerations to take care of. First of all if your auditor is an independent party (e.g. 3rd party auditor). That auditor gave his opinion in a formal report and your management will rely on that auditor's report to take certain decisions. If you modify an auditor's report to intentionally omit findings you can be indicted for intentional forgery. Your management's decisions may be impacted as they do not have a clear vision on the current situation.

Most likely your boss is covering his own ass and scapegoating you if find out. I recommend you, as Anthony mentioned above, to document the request and raise it to your internal audit department, if you do not have such a department, you may raise your concern to your boss their boss.

There are valid reasons you might want to omit"remove" findings. For instance if there are multiple departments that are covered within thea single audit report, you may opt to split up the audit findings and only send findings relevant to theeach department. However you do not appear to be in such a situation.

Working as an IT auditor myself, there are a few considerations to take care of. First of all if your auditor is an independent party (e.g. 3rd party auditor). That auditor gave his opinion in a formal report and your management will rely on that auditor's report to take certain decisions. If you modify an auditor's report to intentionally omit findings you can be indicted for intentional forgery. Your management's decisions may be impacted as they do not have a clear vision on the current situation.

Most likely your boss is covering his own ass and scapegoating you if find out. I recommend you, as Anthony mentioned above, to document the request and raise it to your internal audit department, if you do not have such a department, you may raise your concern to your boss their boss.

There are valid reasons you might want to omit findings. For instance if there are multiple departments that are covered within the audit report, you may opt to split up the audit findings and only send findings relevant to the department. However you do not appear to be in such a situation.

Working as an IT auditor myself, there are a few considerations to take care of. First of all if your auditor is an independent party (e.g. 3rd party auditor). That auditor gave his opinion in a formal report and your management will rely on that auditor's report to take certain decisions. If you modify an auditor's report to intentionally omit findings you can be indicted for intentional forgery. Your management's decisions may be impacted as they do not have a clear vision on the current situation.

Most likely your boss is covering his own ass and scapegoating you if find out. I recommend you, as Anthony mentioned above, to document the request and raise it to your internal audit department, if you do not have such a department, you may raise your concern to your boss their boss.

There are valid reasons you might want to "remove" findings. For instance if there are multiple departments that are covered within a single audit report, you may opt to split up the audit findings and only send findings relevant to each department. However you do not appear to be in such a situation.

Source Link
Lucas Kauffman
Lucas Kauffman
  • 1.4k
  • 16
  • 20

Working as an IT auditor myself, there are a few considerations to take care of. First of all if your auditor is an independent party (e.g. 3rd party auditor). That auditor gave his opinion in a formal report and your management will rely on that auditor's report to take certain decisions. If you modify an auditor's report to intentionally omit findings you can be indicted for intentional forgery. Your management's decisions may be impacted as they do not have a clear vision on the current situation.

Most likely your boss is covering his own ass and scapegoating you if find out. I recommend you, as Anthony mentioned above, to document the request and raise it to your internal audit department, if you do not have such a department, you may raise your concern to your boss their boss.

There are valid reasons you might want to omit findings. For instance if there are multiple departments that are covered within the audit report, you may opt to split up the audit findings and only send findings relevant to the department. However you do not appear to be in such a situation.