Respond to an external auditor.
If you are contacted by an external auditor, ask and obtain answers to the following questions:
- What audit organization do you represent?
- What type of audit is this?
- Has this audit been properly coordinated through the Stanford's Internal Audit Services?
If your department has identified an individual as an audit contact point, that person should be advised. It is also appropriate to contact your supervisor or manager.
Refer auditors who are unable to provide a clear description of their affiliation and the purpose of their audit to an audit liaison representative in Stanford's Internal Audit Department.
In addition, all auditors working at Stanford should also be able to assure you of prior review and coordination with Stanford's Internal Audit Department. No further departmental involvement is needed until that coordination takes place.