Many recruiters searching for a Internal Audit Professional often emphasize the need for a "tactful and diplomatic" leader. However, the truth is that this expectation naturally conflicts with the core mandate of Internal Audit. Who is truly suitable for a career in IA? It requires someone with unwavering integrity, an upright character, and a certain rigidity when it comes to doing the right thing.
I learned this firsthand from two of my mentors, both of whom served as Heads of Internal Audit. Neither of them were "friends" with the various management layers they audited. Instead, their authority and effectiveness came from the unwavering support of their boss, the billionaire owner who inherently understood exactly why the Internal Audit function exists. As I was taught: you cannot please everyone. Man is by nature a political animal. Throughout their careers, they faced numerous false accusations from operational teams, claims of obstructing business workflows or pretending to know how the operations should be run.
Despite this inherent friction, over nearly two decades in the audit profession, one reality becomes abundantly clear: identifying a control deficiency is only half the battle. Communicating that deficiency and driving remediation without irreparably damaging professional relationships is where the real challenge lies.
Because Internal Audit acts as a catalyst for change and highlights operational blind spots, a certain degree of friction is inevitable. However, conflict does not have to mean combat. When managed effectively, it can lead to deeper organizational understanding and stronger control environments.
Here are the core strategies for managing and de-escalating conflict during an internal audit engagement.
1. Shift the Narrative: From "Corporate Police" to "Value Protector"
The root cause of most audit-related conflict is perception. If operational teams view Internal Audit merely as a compliance enforcer looking to assign blame, defensive walls go up immediately.
- The Strategy: Set the right tone at the kickoff meeting. Explicitly frame the audit's objective as a partnership designed to protect business value and streamline operations. When stakeholders understand that you are there to help them mitigate risk and achieve their goals, they are far less likely to adopt an adversarial stance.
2. Anchor Discussions in Objective Data
Subjective observations breed subjective disagreements. When an audit finding relies solely on a sample of manual walkthroughs or verbal interviews, it leaves room for debate and emotional pushback.
- The Strategy: Let the data do the heavy lifting. By integrating robust data analytics, utilizing tools like Power BI or extracting full population data directly from SAP, you remove emotion from the equation. It is difficult to argue with systemic evidence that shows a control has failed 400 times in a quarter. Presenting indisputable facts shifts the conversation from "Are you sure there is a problem?" to "How do we fix this problem?"
3. Enforce a Strict "No Surprises" Policy
Nothing triggers professional conflict faster than an auditee seeing a critical finding for the first time in a formally published draft report. Feeling blindsided damages trust irreparably.
- The Strategy: Continuous communication is mandatory. Discuss potential exceptions the moment they are discovered. Validate the facts with the process owners immediately. By the time the formal closing meeting occurs, every finding should have already been discussed, debated, and agreed upon in principle.
4. Practice Empathetic Listening
Auditors often focus so intently on the control framework that they forget the human element. Operational staff face immense daily pressures, resource constraints, and competing priorities.
- The Strategy: When a stakeholder pushes back on a finding, pause and listen. Often, their resistance stems from a practical operational constraint that you may not have considered. Acknowledging their reality ("I understand that the current system limitations make this control difficult to perform...") validates their experience and de-escalates tension, even if the finding ultimately remains.
5. Co-Create the Action Plan
Dictating a remediation plan from an ivory tower is a surefire way to generate long-term resentment and ensure the control fails again after the audit is closed.
- The Strategy: Focus on solutions, not just problems. Invite the management team to co-create the management action plan. Ask them, "Given your resources, what is the most sustainable way to close this gap?" When auditees take ownership of the solution, they transition from defensive opponents to collaborative partners.
The Bottom Line:
Conflict in Internal Audit is not a sign of failure; it is a natural byproduct of driving necessary change. By maintaining a data-driven approach, practicing empathy, and positioning yourself as a protector of the business, you can turn tense disagreements into constructive professional breakthroughs.
許多獵頭在尋找內部審計時，往往會強調需要一位「圓滑且講究外交手腕」的領導者。然而真相是，這種期望與內部審計的核心職責存在著天然的衝突。什麼樣的人才真正適合從事內審工作？這需要絕對的誠信、正直的品格，以及在堅持正確事物上某種程度的「固執」。
我從我的兩位導師那裡深刻地學到了這一點，他們都擔任內部審計主管。他們兩位都不是各級管理層的「朋友」。相反，他們的權威和影響力來自於他們老闆，那位真正明白為何需要設立內部審計部門的億萬富翁的鼎力支持。正如他們所教導我的：你不可能取悅所有人。人天生就是政治動物。在他們的職業生涯中，經常面臨來自業務團隊的虛假指控，例如被指責阻礙業務工作，或是外行指導內行。
儘管存在這種固有的摩擦，在審計行業近二十年的生涯中，有一個現實變得無比清晰：發現控制缺陷僅僅是成功了一半。如何在不破壞職業關係的前提下，溝通這些缺陷並推動整改，才是真正的挑戰所在。
由於內部審計扮演著變革催化劑的角色，並負責揭示運營中的盲區，一定程度的摩擦是不可避免的。然而，衝突並不意味著戰鬥。如果管理得當，它可以加深組織內部的理解，並建立更強大的控制環境。
以下是在內部審計項目中管理和化解衝突的核心策略。
1. 轉變敘事：從「企業警察」到「價值保護者」
大多數與審計相關的衝突，其根本原因在於認知。如果業務團隊認為內部審計只是一個旨在追究責任的合規執行者，他們會立刻築起防禦的高牆。
- 策略： 在啟動會議上定下正確的基調。明確將審計目標定位為旨在保護商業價值和優化運營的合作夥伴關係。當利益相關者明白你是來幫助他們降低風險並實現目標時，他們採取敵對立場的可能性就會大大降低。
2. 將討論建立在客觀數據之上
主觀的觀察會滋生主觀的分歧。當審計發現僅僅依賴於少量的手動穿行測試樣本或口頭訪談時，就給了對方爭辯和情緒化反彈的空間。
- 策略： 讓數據說話。透過整合強大的數據分析，例如使用 Power BI 或直接從 SAP 提取全量數據，你可以將情緒從方程式中剔除。當系統性證據顯示某項控制在一個季度內失效了 400 次時，是很難被反駁的。提出無可辯駁的事實，能將對話從「你確定有問題嗎？」轉變為「我們該如何解決這個問題？」。
3. 嚴格執行「零意外」政策
沒什麼比被審計方在正式發布的報告初稿中才第一次看到重大審計發現，更能迅速引發職業衝突的了。這種被突襲的感覺會對信任造成無法彌補的破壞。
- 策略： 持續的溝通是必須的。在發現潛在異常的當下，就應立即進行討論。立刻與流程所有者核實事實。到了正式的總結會議時，所有的發現都應該已經被討論、辯論過，並在原則上達成了一致。
4. 實踐同理心傾聽
審計師往往過於關注控制框架，而忽略了人的因素。業務人員每天面臨著巨大的壓力、資源的限制以及相互衝突的優先事項。
- 策略： 當利益相關者對審計發現提出異議時，請暫停並傾聽。通常，他們的抵觸源於你可能未曾考慮到的實際操作限制。認可他們的現實情況（「我理解目前的系統限制使得這項控制很難執行……」）能夠肯定他們的經驗並緩解緊張局勢，即使最終該審計發現依然成立。
5. 共同制定行動計畫
高高在上地發號施令、強加整改計畫，絕對會引發長期的不滿，並確保該控制在審計結束後再次失效。
- 策略： 專注於解決方案，而不僅僅是問題。邀請管理團隊共同制定管理層行動計畫。問他們：「考慮到你們的資源，填補這個漏洞最可持續的方法是什麼？」當被審計方掌握了解決方案的主導權時，他們就會從防禦性的對手轉變為協作的夥伴。
總結：
內部審計中的衝突並不是失敗的標誌；它是推動必要變革過程中的自然產物。透過保持數據驅動的方法、實踐同理心，並將自己定位為企業的保護者，你可以將緊張的分歧轉化為具建設性的專業突破。
Comments
Post a Comment