RE: How do you manage your QSECOFR profile and other Q profiles?

Auditors are only:
Accounting Accuracy;
Inventory Accuracy;
ISO in the narrow range it is used for.

e.g. computer forms are validated for consistency of how the data is
arranged, not anything to do with accuracy of the info on forms.

Because we are privately owned,
SOX does not apply
GAAP does not apply

Stuff bothers me includes:
Paperless office ... stuff done with no paper or computer trail;
DELETE THIS STUFF ... no audit trail, just delete stuff, not to fix a system
problem, but part of the normal business processes.
Give master security access to some consultant without IT people being in
the loop what the consultant is supposed to be doing.
Break closed loops without good controls to reconcile what crosses the
breaks.
An employee arsoned computer and other rooms ... the penalty = lose job,
police not called.

ChadB wrote

Must not have to deal with any auditors at many levels in that company.

"Wintermute,
Sharon"

And your company is willing to live with this? Amazing.

-----Original Message-----
From: Al Mac Wheel

In summary, we have a mess.