Respond to an External Auditor

If you are contacted by an external auditor, ask and obtain answers to the following questions: 

1. What audit organization do you represent?
2. What type of audit is this?
3. Has this audit been properly coordinated through Stanford's Research Administration Policy and Compliance? 

If your department has identified an individual as an audit contact point, that person should be advised. It is also appropriate to contact your supervisor or manager.

Refer auditors who are unable to provide a clear description of their affiliation and the purpose of their audit to Sr. Director, Policy and Compliance in Stanford's Research Administration Policy and Compliance.

In addition, all auditors working at Stanford should also be able to assure you of prior review and coordination with Stanford's Research Administration Policy and Compliance. No further departmental involvement is needed until that coordination takes place.