An executive brings audit, compliance, HR, and legal into line with their agenda through budgets, charters, and staffing, so the functions meant to check them interpret the rules in their favor.
An example
Eighteen months before a private-equity-backed staffing company was due to be sold, its chief executive gave the heads of internal audit, compliance, and HR seats on the transformation steering committee, larger budgets, and a promise that the audit head would become chief risk officer after the sale. Draft findings were now previewed at the steering committee before any report was written. A senior auditor drafted a finding that branch-level contractor classifications exposed the company to back-pay claims. The report that reached the audit committee retitled it a process improvement opportunity and split it across two quarters. When the auditor objected, she was told the matter was operational and moved to a project on travel expenses. The audit committee, which met twice a year and relied on the audit head's summary, closed the item. The buyer's diligence team found it in week three.
Why it works
Cooperation looks better to the function heads, because it brings bigger charters, budgets, steering seats, and the promise of promotion. It is easier, since interpretations are settled in private before any report is drafted, so nobody has to deliver a refusal. Independent judgment looks worse, recast as failing to be a business partner, with hard findings retitled, downgraded, or split across periods. And it costs staff who insist on independence: stalled careers, exclusion from meetings, sideways moves, and performance management through the same captured HR. It depends on the functions relying on the executive for budget, charter, and staffing, with nobody auditing the auditors.
The thinking behind it
Jeffrey Pfeffer Pfeffer's The External Control of Organizations: A Resource Dependence Perspective (1978) holds that whoever controls the resources others need gains power over them. Audit, compliance, and HR heads who depend on one executive for budget, charter, and staffing are dependent in exactly this sense. That is why the defense goes to the body that funds and staffs the function: changing who controls its resources changes whom it answers to.
Robert B. Cialdini Cialdini's Influence (1984) describes reciprocity, the felt obligation to repay what one has been given. A larger budget, a steering committee seat, and the promise of a bigger title after the sale are gifts, and the natural repayment is cooperation: findings softened and reports retitled. Setting function budgets at the audit committee and meeting function heads without management present removes the gift, and the obligation with it.
Warning signs
Audit and compliance findings that would slow the agenda are downgraded, retitled, or closed without escalation. Draft findings are previewed in management steering meetings. Function heads depend on the executive for budget, charter, and staffing, and some have been promised bigger roles after a sale or transformation. Staff who write hard findings get moved, excluded, or put under performance management. The audit committee receives summaries and rarely sees raw findings.
How to defend yourself
A captured function cannot free itself, so work through the body that funds and staffs it.
- If you are inside the function, keep your own dated record of draft findings and how each was changed, and know the escalation route your professional standards give you.
- Take the pattern, with the documents, to the audit committee chair, an independent director, the investors on the board, or the outside auditor.
- Where regulation applies, a regulator can require independence that management cannot override.
- Ask for audit and compliance to report to the audit committee, and for function heads to rotate.
One independent node, such as a determined committee chair, is usually enough to break the capture.
How a leader shuts it down
Have audit and compliance report to the audit committee, with their budgets, charters, and heads' appointments set there. Meet the function heads without management present, and ask to see raw findings. Rotate the heads on fixed terms. Structural capture outlasts the people involved, so the fix has to be structural too: whoever funds and staffs a control function decides how independent it is.