Unlocking the Power of Curiosity in Auditing: The Search for Knowledge

In the world of auditing, where data rules and the hunt for evidence is endless, there’s one secret weapon that every auditor needs in their toolkit: curiosity. This isn’t your average, “I wonder what’s for dinner” kind of curiosity – we’re talking about an insatiable drive to connect dots, uncover patterns, and ask the questions no one else dares to ask.

At the heart of professional skepticism lies the search for knowledge, a fundamental characteristic identified by the Global Public Policy Committee (GPPC). But what does it really mean to embrace curiosity in auditing? Let’s dive in.

Curiosity in Action: Examples of Searching for Knowledge

Curiosity isn’t just for detectives or researchers; it’s your go-to tool for understanding processes, uncovering gaps, and finding what might otherwise remain hidden. Consider these examples:

Scenario 1: Payroll Process

• While auditing payroll controls, you notice an unusually high number of manual adjustments. Instead of merely verifying approvals, your curiosity drives you to ask:
• Why are these adjustments necessary?
• Are patterns emerging around certain employees or pay periods?

Digging deeper, you uncover a lack of segregation of duties in the HR system, where one individual can update employee details and approve changes. By exploring further, you recommend controls to mitigate this risk, preventing potential fraud.

Scenario 2: Revenue Process

During a review of revenue recognition, you find discrepancies in the timing of contract approvals and invoice issuance. Rather than chalking it up to clerical errors, you ask:

• Are controls in place to ensure consistent application of revenue policies?
• Could system configurations be causing delays or inconsistencies?

Your inquiry reveals outdated system logic that doesn’t align with the company’s current revenue recognition policies, allowing you to recommend critical updates.

Scenario 3: IT General Controls

In an IT audit, you notice repeated instances of terminated employees retaining system access for months. Instead of accepting this as a procedural lag, you dive into the details:

• How are access termination requests handled, and who is responsible?
• Could this expose sensitive data or create entry points for cybersecurity risks?

By tracing the issue, you discover a communication gap between HR and IT during offboarding, prompting your recommendation for an automated notification system to close the loop efficiently.

In each case, curiosity helped identify not just the symptom but the root cause – making your recommendations both impactful and actionable.

Tips and Techniques: Mastering the Search for Knowledge

To channel your curiosity effectively, you need a framework. Enter the C.U.R.I.O.U.S. Method – a simple, actionable guide to becoming a better investigator of internal controls:

C – Connect the Dots

• View processes holistically. Link payroll approvals to system configurations, or revenue recognition to contract workflows. Patterns often emerge when you connect seemingly unrelated pieces.

U – Understand the Context

• Controls don’t operate in isolation. Dive into the policies, system architecture, and even the organizational culture that influences these processes.

R – Research Beyond the Obvious

• Don’t stop at testing what’s documented. Ask how controls are working in practice. Shadow process owners and review incident reports to spot operational inconsistencies.

I – Inquire Without Judgment

• Ask thoughtful, open-ended questions. Instead of, “Why is this control failing?” try, “What challenges do you face in implementing this control?”

O – Open Your Network

• Collaborate with IT, HR, and other departments. Seek expertise from cybersecurity consultants or industry benchmarks to validate your findings.

U – Unleash Critical Thinking

• Don’t just identify risks – evaluate their impact. Assess whether exceptions are anomalies or indicative of systemic weaknesses.

S – Stay Curious

• Make it a habit to stay informed about new tools, technologies, and industry trends. Keep an eye on how emerging risks, like AI or cloud computing, might affect internal controls.

Why Curiosity is the Ultimate Superpower in Auditing

In today’s fast-paced, interconnected world, intelligence alone won’t cut it. To stay ahead, you need curiosity to push past surface-level observations and uncover what truly matters.

The best auditors don’t stop at “good enough.” They’re the ones who follow their instincts when something feels off, even if it’s buried in the fine print of an IT system or hidden in the nuances of a payroll process.

So, the next time you’re knee-deep in an audit and a question pops into your head, follow it. Curiosity is your key to deeper insights, smarter recommendations, and ultimately, stronger assurance.

Stay Curious, Stay Ahead Let’s keep this conversation going! Have a tip or an experience where your curiosity led to a breakthrough in internal controls? Share it below – because the more we learn from each other, the sharper we all become.

???? Curious to learn more? Follow me for more insights, practical tips, and yes, a bit of humor. Because auditing is never boring when you add a healthy dose of curiosity! ????

Embracing Professional Skepticism: A Series to Build a Skeptical Mindset

To help make this essential concept more relatable, I’ve launched a series of short videos that break down professional skepticism into bite-sized pieces (don’t worry, no jargon overload!). As auditors, we need to elevate our human skills to tackle the complexity and biases in our work.

The fifth video in the series, "Search for Knowledge", explores this fundamental characteristic of professional skepticism.

Curiosity isn’t just for scientists or detectives – it’s a superpower for auditors too! Learn how being inquisitive, exploring new fields, and digging deeper can help you thrive in today’s complex, fast-paced world of VUCA (volatility, uncertainty, complexity, and ambiguity).

?? Whether you’re an experienced auditor or just starting your career, this video is packed with tips to keep you sharp, skeptical, and always learning. ? In this video, I break down:

? Why curiosity is more important than intelligence in solving complex problems.

? How searching for knowledge helps you connect patterns and uncover insights.

? Practical ways to stay curious and sharpen your auditing skills.

Understanding the six characteristics of professional skepticism is one side of the coin in the quest towards professional skepticism. The other is understanding cognitive biases and how they impact audits.

Join me in building a skeptical mindset that’s not only helpful but essential for high-quality audits. It’s time to make professional skepticism something we can all master and, dare I say, enjoy! Stay tuned for the series.

View all videos in this series here.

#Auditing, #ProfessionalSkepticism, #Curiosity, #SearchForKnowledge, #AuditTips, #LifelongLearning, #TheEvolvingAuditor, #internalaudit, #internalauditor

About The Evolving Auditor Newsletter

Empowering audit, risk, and compliance professionals to elevate their human skills and unlock their full potential. Each edition delivers thought-provoking insights on topics such as cognitive bias, critical thinking, active listening, professional skepticism, powerful questioning, mindset mastery, mental fitness, trust-based relationships, and effective communication. From understanding yourself and others to presenting with impact and writing compelling reports, this newsletter equips you with the tools to thrive professionally and personally. Subscribe to start evolving and transforming your career.

Subscribe today to get the latest insights, tipcs and stories that can inspire you.

About Me

I am Bhavani Jois, a passionate leader and coach who has successfully pivoted after a 25 year career in governance, risk, and audit.?My journey from auditor to coach has been shaped by resilience, curiosity, and a deep belief in the transformative power of coaching.

During the pandemic, I reignited my passion for coaching, leading me to fully embrace my calling and establish The Evolving Way and The Evolving Auditor.

I’m dedicated to helping individuals and teams unlock their potential, achieve lasting growth and find fulfilment in their professional and personal lives.

Join me on this journey of transformation and empowerment!