Why Auditee Relationships Matter
An internal auditor's ability to do their job well depends substantially on the cooperation of auditees. Access to systems, documents, and people; candid answers to interview questions; willingness to engage honestly with findings and recommendations; speed and quality of management responses — all of these are influenced by how auditees feel about the audit team and what they expect from the engagement.
Audit functions with poor auditee relationships consistently receive incomplete information, defensive responses, and management actions that address the letter of audit findings without changing underlying behaviour. Audit functions with strong relationships receive candid disclosures, genuine engagement with recommendations, and often proactive requests for audit input before problems develop into findings.
How Auditors Destroy Trust Without Realising It
Most auditors who damage auditee relationships do so through behaviours that feel professionally appropriate from the inside but land very differently on the receiving end. The most common trust-destroyers include:
- Surprise announcements: Showing up for an audit with minimal notice communicates distrust and creates immediate defensiveness, even when the audit subject has nothing to hide.
- Excessive documentation requests: Asking for voluminous evidence before establishing the specific control question being tested signals a fishing expedition rather than a professional inquiry.
- Blame framing: Framing findings in terms that assign personal blame rather than systemic causes makes auditees defensive and less willing to engage honestly in subsequent audits.
- Gotcha findings: Surfacing minor issues in audit reports that could easily have been resolved informally during the engagement creates disproportionate resentment.
- Inconsistent standards: Applying different levels of scrutiny to different business units — especially in ways that correlate with the business unit's relationship with the CAE — undermines the function's credibility organisation-wide.
Building Trust Deliberately
Trust in professional relationships is built through a combination of competence, reliability, honesty, and genuine concern for the other party's interests. For internal auditors, this translates into specific behaviours:
Communicate early and clearly. Give auditees reasonable notice of upcoming audits. Explain the purpose and scope clearly at the opening meeting. Make the engagement feel like a professional collaboration, not an investigation.
Ask, do not just gather. Before sending document request lists, have a conversation with auditees to understand the process and the controls. This conversation often provides more insight than documentation review and signals respect for the auditee's expertise in their own domain.
Share findings promptly. Nothing damages trust more than an auditor who observes an issue, says nothing during the engagement, and then surfaces it in the draft report. Share preliminary findings as they develop and give management the opportunity to provide context and correct factual errors.
The best auditors make auditees feel heard, respected, and understood — even when the findings are critical. That does not mean softening the findings. It means delivering them with integrity and professionalism.
Independence Does Not Mean Distance
A common misconception is that maintaining professional independence requires maintaining personal distance from auditees — that auditors who build genuine relationships risk compromising their objectivity. This confuses two different things. Objectivity is about the mental independence to form honest professional judgements without being influenced by relationships or personal interests. It does not require auditors to be unfriendly, uncollaborative, or unnecessarily adversarial.
Auditors can have warm, respectful, genuinely collegial relationships with auditees and still report findings honestly and without favouritism. In fact, these relationships typically produce better audits — because auditors who are trusted receive more information, better access, and more candid engagement from the people they are auditing.
When Relationships Become Difficult
Not all auditee relationships are salvageable. When an auditee consistently obstructs audit access, provides misleading information, or refuses to engage with findings in good faith, the audit team must escalate — first to the auditee's management, then to the CAE, and ultimately to the audit committee if necessary. These escalation steps should be documented and conducted professionally. The goal is always to resolve the impediment and continue the audit effectively — not to win a conflict.