On the world of RACI, the client is always the A. I don't expect the guy who gets paid to be honest. I expect the payer to do their checks.
And stuff like that could have been picked up but an ITGC audit, Project Audit (reqs), SOX, any type of break/smoke test.. and so on..
Somebody dropped the ball - hard. This could have been prevented and/or detected and/or corrected.
Having served as Internal Audit for many many years, I get angry because I/someone in my line of work should have caught this.
Now.. WTF was the internal audit of Royal Mail/Post Office? Why isn't the CAE brought in for questioning and what was the scope of their audits?
Yes, definitely NOT YC company. But I don't see any YC companies hiring auditors, only engineers ;)
