CRSS study materials
CRSS study resources

The Favorable Audit

CRSS · Put your knowledge to work in context.

All case studies

The Favorable Audit

A private-equity firm engaged you to audit a foundry it is ten days from acquiring. Your $85,000 fee is unpaid. You find three serious conditions: an unguarded conveyor tail pulley accessible to cleanup crews; fourteen employees exposed to silica with no exposure monitoring on record; and a respirator fit-test log containing entries signed by a supervisor for tests that, by his own admission, were never conducted. The plant manager asks you to put these items in an appendix marked 'draft, for discussion only' and keep them out of the executive summary, saying the deal will collapse otherwise. Separately, a maintenance technician emails your personal address to say he has been raising the fit-test issue for a year.

1. Identify the ethical obligations and conflicts in this situation and state what you do about the request and about the unpaid fee.

Read the worked answer

The primary obligation runs to the people exposed, then to accuracy. Fourteen workers are breathing silica without any exposure characterization, and workers have been assigned respirators on the strength of records that were fabricated. That is the fact that governs everything else; the deal timeline does not change it.

Who is the client? Not only the plant manager. The private-equity firm is the engaging party and is relying on your report to price and structure an acquisition. The manager's request causes the buyer to acquire a liability it believes does not exist. You would be the instrument of that deception, and the buyer - your actual client - is the party harmed.

The request itself. Labeling findings 'draft, for discussion only' in an appendix does not change the facts; it creates a document engineered to be ignored while preserving deniability. Refuse, in writing, and explain the commercial logic: a buyer that acquires a plant with an unguarded pulley, an unmonitored exposure, and falsified records inherits the liability, the citation exposure, and the successor-liability argument. Concealment raises the buyer's risk rather than lowering it.

Route it correctly. Take it directly to the operating partner who engaged you, in a documented conversation followed by an email summarizing what was said. Do not let the request live only between you and the plant manager.

The unpaid fee. A commercial dispute is not leverage over professional judgement, and it is not a reason to soften a finding. You may withhold deliverables only as the contract allows, and never in a way that conceals an imminent hazard - the unguarded pulley is one. If you withhold, you still tell the operating partner verbally and in writing what you found. Never trade accuracy for payment, and never let the fee enter the conversation about content.

2. How do you write the report so it is accurate, decision-useful, and defensible to a regulator, a lender, and a court? Address the silica finding and the fit-test records specifically.

Read the worked answer

Structure the report as a decision document, not an opinion piece. Executive summary opens with the three severe findings, risk-ranked, each in one plain sentence with the number of people affected and the urgency. Then the body, then supporting data and methodology.

Silica: do not write 'exposure likely exceeds the limit' as though that is a measurement. Write it as what it is - the absence of monitoring is itself the finding. Fourteen employees perform tasks with known respirable crystalline silica potential and there is no exposure assessment on record, therefore there is no basis for selecting controls, no basis for respirator selection, and no basis for determining whether the exposure exceeds the action level or the permissible limit. Recommend immediate sampling by an accredited laboratory using a documented strategy, interim wet methods and local exhaust, and medical surveillance evaluation. Give the standard's requirements as the frame.

Fit-test log: avoid naming a culprit or characterizing intent - describe records and facts. State the dates and the entries, note that supporting records (test protocol, equipment, calibration, or challenge-agent documentation) cannot be produced, note that a named individual has acknowledged signing for tests not performed, and conclude that respirators are therefore not a reliable control and their users are unprotected. Recommend immediate re-fit-testing of every user, a records-integrity review covering other safety records signed by the same person, and notification to the buyer's counsel because the issue may predate the transaction.

Defensibility: observe only what you saw, with dates, shifts, and conditions; cite the standard for each finding; keep raw notes, photographs, and the revision history of the report; do not delete earlier drafts; avoid adjectives and conclusions you cannot source. Write it so it could be handed to an inspector or filed with a lender without anyone needing to explain it first.

3. What do you do about the maintenance technician's email, and where is your line if the client instructs you not to disclose anything to the regulator?

Read the worked answer

The technician: acknowledge receipt briefly, thank him, and tell him his concern is being addressed in the report - without promising an outcome, without advising him on what to do, and without asking him to copy documents or gather evidence, which could expose him. Do not reveal his identity to plant management; if you must describe the concern, describe it as corroborated by your own observation, which it is. Document the contact, the date, and your response, and keep it out of the shared client folder. Recognize that he may be a protected whistleblower and treat his identity as something you are not free to spend.

Your line on disclosure:

  • You are a consultant, not the employer. In most jurisdictions the reporting duty sits with the employer, and you should not assume a personal statutory duty to notify a regulator of your client's conditions. Do not overstate your legal obligation in either direction; get advice if it matters.
  • What you cannot do is participate in concealment. So: the report goes to the client exactly as written, with the findings in the body and the executive summary intact. That is non-negotiable and it is the first line.
  • The unguarded conveyor is an imminent-danger-class condition. If the client will not abate it, your obligation shifts from documentation to escalation: state the hazard in writing to the most senior person available, recommend immediate barricade or lockout of the pulley as a zero-cost action, and record the refusal.
  • If the client then instructs you to alter the report or to stay silent while a serious hazard remains unabated, escalate to your own counsel and your professional body's ethics process, consider withdrawing from the engagement with a written explanation, and in the narrow case of a continuing danger to life, notify the authority. Withdrawal does not erase the duty to have warned someone first.
  • Check the engagement contract before any of this for confidentiality clauses, deliverable terms, and notice provisions; know what you agreed to before you breach it.