>>
>>They can only cite rules; not make them.
>>
>How can you be so certain?

If they are creating rules, they are corporate compliance auditors.

If they are creating, enforcing, and reporting on rules, they have a conflict 
of duty.

These three functions should be under what is known as "separation of duties".
That's what got Anderson into trouble.

How can I be so certain?
I asked an auditor.


-
-teD

O-KAY! BLUE! JAYS!
Let's PLAY! BALL!

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to