The long (and recent) history of major business frauds and failures invariably points to the culture of the fraudulent organization as a root cause—whether it’s one where “greed is good,” or has a mentality to “do whatever it takes to hit the numbers,” and so forth. Fair enough. But how can an internal audit department evaluate something as intangible as culture?
