The auditor’s review of organizational structure should disclose the more egregious
examples of incompatible tasks, such as one individual opening and approving timecards,
authorizing employee payments, and receiving and distributing the paychecks.
Covert relationships that may lead to collusion may not be apparent from an organizational
chart. For example, married employees (or those otherwise related) who work in
incompatible areas may go unnoticed. The auditor should determine whether the organization
has an effective policy for dealing with nepotism.