Re: Caught by the auditors
Ironically, the auditors would probably have been receptive to someone approaching them openly with an interest in how they do their job, what they are looking for, etc., with a view to improving things. After all, it's likely to all end up in their report anyway, and if the programmers know what to do to prevent the things they are looking for, then they'll have less work to do, and less to write up in their report next time (for the same amount of money).