Five Things Internal Auditing Has Taught Me About Human Nature

Richard Chambers, CIA, CGAP, CCSA, CRMA, shares his personal reflections and insights on the internal audit profession. 


As a young internal auditor, I concentrated extensively on learning the technical skills of the profession. I learned early in my career about the importance of developing an audit plan at the beginning of every engagement, documenting the results of the audit, and crafting a well-written audit report. I also learned how important it was to understand the operations/business of the areas I was auditing. All of these skills served me well throughout my career. However, I can honestly say that the technical skills were easy to learn compared with the “soft skills” that I needed to hone in order to be successful.

Over the course of my career, I have led or served on scores of audit teams focused on an incredible array of industries and operations. As I did so, I began to notice that regardless of the function or operation I was auditing, there were common threads in the way the people behaved. Overall, the hundreds of professionals over whose areas of operations I have audited have been good, decent, and hard-working professionals. Many of them had thankless jobs at which they toiled tirelessly without complaining. However, I have learned some things along the way about human nature that might be useful for those who are starting out in their careers and even for those who are seasoned internal audit veterans (and want to compare their observations).

Smart People Can Do Dumb Things

It is easy for internal auditors to be intimidated when auditing an area led or populated by intelligent and seasoned professionals. They often can dazzle you with their deep knowledge of the operations and appear to be unassailable. However, I frequently have observed that some of these bright folks have done some pretty “dumb” things. On occasion, I have noticed that their decisions to violate or circumvent internal controls were intentional decisions based on their belief that their experience or expertise didn’t warrant the kind of controls they were being asked to follow. Don’t assume that smart people always do smart things.

Good People Can Do Bad Things

When we think of fraudulent acts, we tend to associate them with nefarious characters who intentionally set out to do something bad. However, many of the frauds I discovered or reviewed during my career were committed by otherwise good and decent people who somehow lost their way. These were people who often were under extraordinary financial or personal pressures outside of the workplace. Many times, they rationalized their initial actions and didn’t intend for the frauds to morph into something as big as they eventually did. As internal auditors, we should not assume that everyone is doing bad things. However, we must maintain a level of professional skepticism and remember that even good people can do bad things.

People Like to Be Recognized for Accomplishments

As internal auditors, we are trained from the outset that the purpose of our work is to provide assurance on the effectiveness of risk management, internal controls, and governance. Yet, we often bolt straight for the findings on inadequate risk management, internal controls, etc., in our final audit report. Many audit reports are crafted with no genuine recognition of management’s accomplishments. It is one of the things that gives us a bad reputation. I have discovered during my career that people are looking for an objective assessment of their areas of operations. They understand that we have a job to do, but seek to at least be recognized for what they have accomplished or done well. Including a “management accomplishments” section at the beginning of an audit report can go a long way toward generating acceptance of our findings and recommendations for corrective actions that follow.

People Don’t Like to Be Surprised

One of the first audits I led taught me a lot about the importance of communicating throughout the audit. My team and I were under a lot of pressure to complete the audit quickly. Following an entrance briefing with operating officials, we put our heads down and went to work. Four weeks later, we presented the same officials with a draft report. They were incensed at what they viewed as being “blindsided” by the results. One of them said to me that he didn’t disagree with the results of the audit, but he sure would have appreciated learning about the problems as we discovered them. In recent years, the importance of communication throughout the engagement has been stressed in audit standards and guidance. Timely communication is important throughout the engagement, in large part because people don’t like to be surprised.

People Like to Make Themselves Look Good

Most of us seek to be recognized for what we do well. While we may recognize our shortcomings or failures, we certainly don’t accentuate them when communicating with others. That is important to remember when conducting interviews during an internal audit. People will speak effusively about things that are working well. However, they rarely volunteer information about things that are not. This is another reason that professional skepticism is so important for internal auditors. Don’t assume that you have been told “the truth, the whole truth, and nothing but the truth,” because people often like to make themselves look good.

This is my short list of things I have learned about human nature in the workplace over my career as an internal auditor. I welcome your thoughts.

Posted on Feb 11, 2013 by Richard Chambers

Share This Article:    

  1.  Dear Mr Richard Chambers,

    I have read your article about the list of things you have learned about human nature in the workplace and I totally agree.

    I have also noticed that people who are afraid of auditors do not really understand the auditor's role, as a result they create a dislike and may even call us spies.  What I found helps me to be successful also was that by explaining to the auditees the risks involved for failure to adhere to policies and procedures and/or the need to improve in the areas being audited as a safeguard for themselves helps to positively impact on the audit.  People feel more comfortable to give information which puts less strain on the audits.

    Kindly respond on my comment.  


    Sulaha Lily Mohammed FMAAT 



  1.  Dear Richard,

    Your insights are excellent. I agree with everyone. The last one led me to think about whether it would not be good to add to the text, maybe add another experience.
    "People always say what they see wrong"
    I give this advice after twenty years of my auditing experience to my students, who are now beginning with internal auditing. I say, do not worry, auditees tell themselves you all. The problem is only in whether the auditor is able to perceive these signals due to his professionalism, experience and skill that he continued in responding to these signals.
    Rodan Svoboda
  1. Hi Richard,

    Very wise and very well written.  I'll share your advice with our team.

    If I had to add one, it might be "people like to provide feedback, not just receive it."  Always ask at the end of the audit how we could have done better.


    Carol Gordon

  1. Dear Richard,

    Having been an auditor in Australasia (including South Pacific islands), USA and Canada for almost thirty years, I am not only wholeheartedly endorsing the comments made by you and the three others - Sulaha Lily Mohammed FMAAT, Rodan Svoboda and Carol Gordon,

    I must also salute Dr Wayne Dyer from whom I have learnt many life skills and echo his line here - "If we change the way we look at things, the things we look at also change". It is a truth of quantum physics that all of us represent the forces of nature governing the universe with utmost precision.

    As a catayst of change (and not as a policeman) the Internal Auditors need to change the way we have been traditionally looking at things, if we needed to change things for the better in this ever-changing universe. "Soft skills" must be made a mandatory subject from High School syllabus !

    Best regards,

    Partha (Pat) Banerjee


  1.  Dear Richdard, 

    Thanks so much for writing this. I am now embarking on my career in internal auditing  and those are wonderful insights you've provided me with. 


    Best Regards, 


  1.  Dear Richard,

    I would really appreciate you for sharing such nice experiences. However, i would add that people always want to be considered as best employees regardless the fact what they have done wrong.

  1. thank I have learnt from your article as a young man who is interested in internal auditing and I believe 10 years from now i will be a amongst the best internal auditors through people like you 

  1. Dear Richard, Very nice article. Infact many audit reports doesn't have section for management accomplishment. It was just a fault finding mission. If we don't find we will be out there from our work. This will have always pressure to find out things. some are tiny items which will be bloated. People need to understand that we are doing this for the welfare of everybody.
  1. Thanks for sharing your thoughts. I would like to add that, some times people try to use the auditor to put forward their grievances to the management. And to my surprise at a time, my audit report, mentioning "the need of additional training for a perticular employee" was used to settle an earlier score and sack him. I sincerely believe that we as impartial auditor must keep this in mind.

  1. Dear Richard,Your insights are so rich and educating

Leave a Reply