Category Archives: Health & Safety

Results from the Auditor QuickQuiz

Our auditor quiz is now closed after a month. The questions were based on existing international non-financial auditing standards, Association of Certified Fraud Examiners (ACFE) fraud identification/examination techniques and US Government Auditing Standards for non-financial audits. There were fewer respondents than we had hoped so we can’t extrapolate beyond our dataset. Even so, some notable trends did emerge.

Of those who responded, 47% were EHS auditors and 27% were CSR auditors. We had hoped more CSR auditors would have participated. Other information about the respondents’ backgrounds:

  • 60% had no certification or “other”
  • 50% have 10 years or less auditing experience
  • 50% have 50 or fewer audits
  • 13% have participated in more than 500 audits during their career
  • 63% spend at least 75% of their time conducting audits

There were only 2 “passing” scores – i.e., greater than 70%. The average score was 49% – far lower than was expected.

Knowledge of standard terminology seems to be lacking, further reflected in poor scores for questions that embedded the terminology within them. For instance, only 30% correctly defined “audit criteria” as meaning the audit protocol. This likely led to 53% of respondents incorrectly answering that QA/QC reviews should include assessing the correctness of the “audit criteria used by the auditor.” QA/QC reviews of auditor working papers should look at how an auditor applied the audit criteria, not the inherent accuracy of the criteria (or audit protocol) used by the auditor. Indeed, only 10% correctly identified that none of the answer options are appropriate for QA/QC reviews.

Only 3% considered interviews better than document reviews when asked directly what type of evidence is strongest. Yet when the question was placed in a practical setting, 73% indicated they would rely on interviews over documentation. Only 26% correctly identified the evidence hierarchy (from strongest to weakest).

On a more positive note, 83% answered that they would decline to develop a document that they audited, meaning 17% did not view this as a conflict of interest. Frankly, we were disappointed that there was not a perfect score in identifying this to be an independence issue.

In answering the question listing possible common evidence problems, just over half (53%) correctly indicated that all of the answer options are common evidence problems.

Finally, 2/3 incorrectly answered that initial determinations of significance/materiality should be made after assessing evidence. It is possible that respondents did not read the question carefully and pick up the word initial.

Certainly more responses would have provided a better representation, but we think there are some valuable take aways from our limited data.  Among them – the gap between EHS/CSR auditor knowledge and existing (and theoretically similar) non-financial audit standards may be larger than previously thought.  As the importance – and liabilities – of sustainability/CSR audits grow, increased auditor training and competence seems warranted.

Last Week for Auditor QuickQuiz

Our auditor QuickQuiz will close at the end of the day September 1.  We hope to see more folks will take a few minutes to answer the questions.  It is painless.

Some of the trends we are seeing are:

  • 67% of the respondents have more than 10 years experience, with 75% or more of that experience doing EHS/CSR audits.
  • Only 15% of the respondents had a passing score.
  • There is a gap in knowledge and application of fundamental audit terminology.
  • There is inconsistency in understanding the strength of evidence types, with an over-reliance on interviews over documentation.

Things are likely to improve when we get more responses.

Auditor QuickQuiz Update

Our short auditor skills QuickQuiz has only been live for a few days and we have logged responses.  The number of respondents is smaller than anticipated but trends are appearing.

The Good:  Respondents understand follow through with sampling plans, are aware of the Fraud Triangle and know the role body language plays in interviews.

The Bad:  Most importantly, respondents have been unable to identify specific threats to auditor independence and they have demonstrated a lower-than-expected understanding evidence corroboration and hierarchy.  Other areas where knowledge improvements seem necessary are materiality determinations, awareness of basic audit terminology and the scope of a QA/QC review.

Keep those responses coming in, and thank you for taking a few minutes to complete it.

New Advanced Auditor Training Program for HSE/CSR Auditors

Elm Sustainability Partners and Elm Consulting Group International have launched a new training module for senior-level and experienced health, safety, environmental and social auditors seeking to improve their auditing skills and get updates on timely topics related to non-financial auditing and technology.

It is also relevant to those buying HSE/CSR audit services who are looking to improve the quality of audits they receive.  After this course, buyers can identify specific areas of audit practice improvements to request of their providers.  Alternatively, these buyers may wish to require their external HSE/CSR auditor to complete this training themselves.

A partial list of what is covered includes detailed review and practicum concerning:

  • auditor independence standards and managing impairment threats
  • audit criteria requirements
  • audit and evidence limitations
  • evidence hierarchy, weighting and corroboration
  • fraud, forgery and tampering – including new concerns brought about by technology
  • interviewing skills including fraud examination and FBI techniques
  • discussions of US Department of Justice Criminal Division Evaluation of Compliance Program criteria (2017), the June 1, 2017 US Public Company Accounting Oversight Board (“PCAOB”) auditor reporting standard on Critical Audit Matters and EU Non-financial reporting rule
  • audit QA/QC considerations

Each participant will take a pre-test to establish a knowledge baseline and identify specific areas for improvements.  Exercises are administered throughout and a post-test will conclude the session demonstrating the advanced competencies gained.  HSE/CSR regulatory and other technical topics will not be covered as this is not a regulatory update session.

Elm Principals are BEAC Certified Professional Environmental/Health/Safety Auditors (CPEA), have served on the Board of Directors of The Auditing Roundtable (recently merged into the Institute of Internal Auditors (IIA)) and BEAC, and have trained thousands of internal and external HSE auditors over the past three decades.

Contact us to learn how you and your team can take advantage of this unique program.

New Social Auditor Certification in the Works

We have been vocal in our concerns and criticisms concerning social/CSR auditing.  And we have ourselves been criticized for that. Fair enough.

The Association for Professional Social Compliance Auditors (APSCA) has released for public comment its draft Code of Conduct and Auditor Competency Standards – available here.

We support APSCA and its work towards improving the entire “ecosystem” of CSR auditing.  Anyone with a dog in this hunt should click on the link above and submit comments.  APSCA is keen to obtain input from as wide a range of stakeholders as possible to help become as credible as possible.  Given the breath of subject matter that is being demanded of CSR auditors by buyers of their services, there is a great deal of overlap in APSCA’s draft into environmental health, safety, transportation and other technical areas.

You Are What Your Suppliers Do: Supplier Actions Make Headlines, Break Business

With companies facing increasing pressure for the actions of every part of their supply chain, demand for – and reliance on – supplier/corporate social responsibility (CSR) audits conducted by third parties has grown rapidly.

Shirts, Phones, Rocks and Shrimp

But there is concern about the quality, reliability and credibility of these audits.

CSR Auditing and Toilet Paper

Is Social Auditing Really Auditing?

Harvard Professor Identifies Factors for Meaningful CSR and Supply Chain Audits

You Don’t Know What Your Suppliers Are Hiding

Companies rely on their CSR audit firm to utilize qualified auditors, employ adequate QA/QC processes and expend adequate time to conduct a reasonable audit. Yet there are no generally-accepted professional CSR audit practitioner standards. Moreover, due to cost pressures, lowest cost audit providers are frequently selected that may not have appropriate auditing skills or training – the largest CSR audit firms conduct tens of thousands of these audits each year. Increasing audit time and costs to improve quality or credibility is typically not realistic – the business model is inherently high-volume, low margin.

Are these audits effective at findings supplier actions that create risks for you? Can a company gain confidence in their CSR audits without adding costs? Is a change in auditors necessary?

Improve Credibility for Disclosures, Media and Customers

Changing audit firms is not necessary, nor is another layer of auditing. Instead, a formalized auditor training program can be a low cost yet effective solution.

The Elm Consulting Group International is expanding our well-proven auditor training program to companies who use CSR/supply chain auditors. The intent of this program is for brands to provide detailed communication and training to their current CSR/supply chain auditors about the company’s requirements for auditor competence, audit quality and processes in order to enhance the credibility of audit information.

Our formalized training for existing CSR auditors builds their client’s confidence in the quality of the work provided. The program is not intended to provide training on specific audit topics such as child labor or worker rights. Instead, the focus is on proven audit techniques such as:

  • Understanding and applying professional skepticism
  • Interviewing and active listening
  • Identifying and responding to non-verbal cues within multi-cultural contexts
  • Evidence sampling methodologies
  • Using information from different sources
  • Verification and recomputation techniques
  • Judging audit evidence quality and limitations
  • Fraud detection
  • Using working papers and audit protocols
  • Writing effective and complete audit findings
  • Audit quality expectations, requirements and processes
  • Maintaining auditor independence, including auditor rotation

Our Qualifications as The Leader in Auditor Training

Our HSE auditor training experience began in the 1980s and we have successfully trained hundreds of external and internal auditors. Elm Principals hold auditor certifications from the US Board of Environmental, Health and Safety Auditor Certification (BEAC, now wholly merged into the Institute of Internal Auditors) and UK Institute of Environmental Management & Assessment, are approved trainers for the IIA EHS auditor certification program and are subject to annual continuing education requirements ourselves. Further, Elm Principals have served in various Board positions in The Auditing Roundtable (merged into the IIA in 2016) and BEAC, including the current BEAC Chair.  More information about our internal audit quality and auditor competence standards is available here.

Give us a call at 678-200-3424 or contact us via email to discuss how we can help you increase confidence in your CSR audits.

Apropos: Dia de los Muertos and the Billable Hour

Today is Halloween in the US and Dia de los Muertos in Mexico.  It is a time based on the idea of reflecting on death.  Now we aren’t being morbid here – instead we grinned at the amusing irony of the timing of this article on LinkedIn which is an obituary to the billable hour.

We absolutely agree with the downsides of billable hours.  All of us at Elm, in prior points in our careers, have had ourselves and clients held hostage by the almighty billable hour.  Over the past several years, we decreased our use of hourly rates and billings – instead working on a daily rate or, increasingly, on a fixed fee basis.

Given all that is right with eliminating hourly billing, a reasonable person might ask why doing so remains ubiquitous for consulting/auditing firms?  Yet another irony for those of us who help client organizations in changing their internal culture – because it’s the way it’s been done in the past. 

Hmmmmm.

Cyber Attack on Iron Furnace Controls Causes Physical Damage to Plant

A few years ago, we wrote about how the growth of cyber attacks should be considered when companies assess environmental risk of their operations.  As highlighted in that article, rogue code was discovered before harm was done.

But an iron foundry in Germany was not so lucky.  As reported in this  WSJ article,

The plant’s control systems were breached which “resulted in an incident where a furnace could not be shut down in the regular way and the furnace was in an undefined condition which resulted in massive damage to the whole system,”

This situation should cause concern to anyone responsible for HSE and sustainability matters.  Malicious control of production operations can result in all sorts of nightmare scenarios, especially where the manufacturing operation involves the use of chemicals.  In the most minor case, environmental permit violations and media coverage are probable.  The worst scenario could involve the intentional weaponization of manufacturing by hacking operational controls and intentionally creating another Bhopal or Chernobyl.

We continue to recommend that companies consider these issues when conducting environmental risk assessments of their operations.

Our Pick for the Super Bowl 2014 Ad Winners

Ok, we admit it – this post will be completely gratuitous and self serving.

You may have heard about the Super Bowl ad give-away contest sponsored by a well-known small business accounting software company.  CNN recently posted a story on it.

We thought it would be fun to give it a try, so we posted our entry.

Your vote and support would be greatly appreciated.  And we promise to post pictures from the Big Game if you help get us there.

 

We Haven’t Forgotten What We Do

Although Elm has invested much time and effort into our conflict minerals services over the past three years, we continue to provide our core services of HSE auditing and program development.

We gain new clients and engagements each year with much of that growth outside the US.

Those who have come to know us in the conflict minerals arena, we would be pleased to talk with you about how Elm can assist you with HSE audit program support.

Please do not hesitate to contact us with questions. We look forward to talking with you.