Conflict of Interest and CFO Pressure on an Audit Finding
An independent auditor is engaged by a hospital's compliance department to audit 25 outpatient surgery claims. Before fieldwork, the auditor learns that their spouse is the clinic manager for the audited department. The auditor discloses this to the compliance officer, who says, 'We are behind schedule; your spouse will not be involved, and we need the report by Friday.' During fieldwork, the auditor finds that 9 of 25 records lack a physician signature and 4 lack documentation of medical necessity. The hospital CFO calls the auditor and says the signature finding 'looks bad' before a board meeting, asks the auditor to remove it, and hints that the audit contract may be extended next year if the report is 'practical.' The auditor also has a close friend who is a surgeon in the department.
1. What independence and ethical issues are present?
Read the worked answer
There are multiple threats to independence and objectivity:
- Spouse as clinic manager: a close family relationship with someone who can influence the audited activity creates a self-interest and familiarity threat. The fact that the spouse will 'not be involved' does not eliminate the appearance problem.
- Close friend in the department: another familiarity threat that must be disclosed and evaluated.
- CFO request to remove a finding: an intimidation and self-interest threat. The auditor's objectivity is compromised if the report is altered to protect the CFO or preserve the contract.
- Contract-extension hint: a contingent benefit that improperly links the audit outcome to future work.
- Friday deadline pressure: not unethical by itself, but it must not be used to skip procedures or suppress findings.
Independence requires both fact and appearance. The auditor must avoid a situation where a reasonable outsider would question the report. The compliance officer's assurance is not sufficient to cure a structural conflict.
2. What should the auditor do about the spouse and the CFO request?
Read the worked answer
The auditor should:
- Disclose in writing the spouse's role and the close friendship to the compliance officer and, if available, the audit committee or chief compliance officer outside the CFO's chain of command.
- Assess recusal: if the spouse manages the clinic or can influence the records, the auditor should decline or reassign the engagement. A different auditor should perform the work.
- Refuse to remove the finding. The signature deficiency is a factual finding. Removing it would misrepresent the audit.
- Document the CFO's request in the workpapers, including date, time, and substance.
- Escalate the pressure to the audit committee, compliance committee, or legal counsel. If the organization insists on suppressing the finding, the auditor should consider withdrawing.
- Do not accept any contingent contract extension tied to the report.
The auditor should not confront the CFO alone or negotiate the finding. Independence requires that the reporting line protect the auditor from operational pressure.
3. How should the report be handled given the pressure?
Read the worked answer
The report should be issued through the compliance department and audit committee, not cleared by the CFO. It should include:
- The 9 unsigned records and 4 medical-necessity deficiencies as factual findings.
- The audit scope, sample, and limitations.
- Management's response, including any disagreement.
- A clear statement that signature and medical necessity are conditions of payment, not stylistic issues.
- Recommendations: signature attestation workflow, medical-necessity documentation education, and a follow-up audit.
If the CFO continues to pressure the auditor, the auditor should report the interference to the audit committee or board and seek legal advice. The auditor should preserve all communications. If the engagement contract requires the CFO to approve the final report, that clause should be reviewed because it conflicts with independence. In extreme cases, withdrawal may be the only way to avoid issuing a misleading report. The auditor must not trade the finding for future work.