Speaking of information controls, ….
“After One Auditor Flunked Brazil Dam, Vale Found Another Who Passed It,” The Wall Street Journal, March 5, 2019. Did dam owner fire an auditor who refused to certify a dam as safe? Dam burst, killing people.
How does your company deal with bad information? Maybe the auditor should have brought chocolates.
Governance (by cutting off sources of independent opinions contrary to management’s desires) may not be the best way. Is independent information worth more? Can it be discounted without something “more”?