Audit and evaluation capture through undue influence
Audits, evaluations, completion reviews and disposal assessments are shaped by political or commercial influence, producing biased findings and compromising performance.
Red Flags & Indicators
- Auditor and evaluator selection is non-competitive or independence is not evidenced, with repeated appointments of the same firms or panels.
- Terms of reference and scope are changed late to narrow scrutiny, omit critical issues, or limit access to sites, staff, or data.
- Draft findings are amended without a traceable evidence or review trail, yielding conclusions not grounded in recorded issues.
- Recommendations lack a formal management response, owners, deadlines, or tracked follow-up, with repeated deferrals and no clear rationale
- Asset valuation for disposal is not adequately justified, resulting in premature or delayed disposal decisions.
Stakeholder Guidance
Stakeholder Exposure
Exposure includes pressure to influence findings; biased audit and evaluation conclusions; high risk of disputes and claims; increased risk of liability if conflicts arise; and reputational risk.
Decision Point
During audit and evaluation, require independent terms of reference and full evidence access; escalate when signs of undue influence emerge.
Mitigation Actions
• Require clear terms of reference for any engagement (scope, access, sampling, site visits), documenting any late scope restrictions or access limitations
• Adopt internal policies ensuring auditors and evaluators have independent access to sites and documents
• Apply conflict-of-interest checks for any advisers and consultants
• Ban/reject contractual clauses and fee structures where success fees paid to advisers and consultants are linked to audit and evaluation outcomes
• Use internal compliance escalation processes and whistleblower channels, where available, to report any pressure to alter evidence or findings, tracking corrective actions
Mitigation Resources
Require conflict-of-interest declarations and documented conflict management for advisers, assurance providers, and relevant staff involved in audits, evaluations, completion reviews, or disposal assessments; exclude conflicted parties until conflicts are resolved and recorded, and prohibit fee structures or intermediary arrangements that depend on audit or evaluation outcomes.
Conflict-of-interest management and ethics controls — https://toolbox.infrastructuretransparency.org/resource/conflict-of-interest-management-and-ethics-controls/Screen advisers, agents, assurance providers, and other counterparties involved in audits, evaluations, completion reviews, or disposal assessments; verify beneficial ownership where feasible, related-party links, PEP exposure, and sanctions risks, and escalate or stop engagement where unresolved red flags remain.
Counterparty integrity screening and due diligence — https://toolbox.infrastructuretransparency.org/resource/counterparty-integrity-screening-and-due-diligence/Failure Cases
Good Practices
Stakeholder Exposure
Exposure includes unreliable audit and evaluation findings; delayed corrective action and recovery; higher ESG and reputational risk; and sanctions and debarment contagion risk.
Decision Point
Before considering audit and evaluation findings and releasing funds, request evidence of independence and scope integrity; pause decisions and commission an independent review when signs of undue influence or scope limitations arise.
Mitigation Actions
• Treat credible interference or scope restriction as a suspension trigger
• Condition financing on disclosure of key findings, management responses, conflict-of-interest declarations, and corrective actions
• Include audit/verification rights
• Commission independent review when signs of capture emerge (repeated non-competitive appointments, late scope exclusions, unsupported draft changes, missing follow-up tracking, lack of traceable evidence), pausing funding pending review and corrective action remediation
Mitigation Resources
Conduct integrity due diligence and issue tracking on grievance and whistleblowing arrangements; require accessible, confidential reporting channels, documented non-retaliation protections, incident reporting, remediation plans, and independent review where retaliation risks are high, and pause support where concerns remain unresolved.
Investor integrity due diligence and monitoring — https://toolbox.infrastructuretransparency.org/resource/investor-integrity-due-diligence-and-monitoring/Require protected whistleblowing and grievance channels that allow retaliation, interference with complaints, or suppression of reports to be raised safely; require documented case handling, outcomes, remedies, and safe escalation routes where retaliation risk is material.
Grievance, complaints, and protected reporting — https://toolbox.infrastructuretransparency.org/resource/grievance-complaints-and-protected-reporting/Failure Cases
Good Practices
Stakeholder Exposure
Exposure includes accountability gaps; weak lessons learned; high risk of poor performance and legal challenge; and loss of public trust.
Decision Point
Before accepting audit and evaluation reports, verify auditor and evaluator selection, scope, consistency of follow-up plan, whether conflict checks were conducted and evidence traceability; re-procure or replace when signs of undue influence or scope limitations arise.
Mitigation Actions
• Agree on clear terms of reference (scope, access, sampling, site visits)
• Publish terms of reference, criteria and decisions appointing auditors and evaluators, reports on findings, and corrective action plans
• Ensure auditors and evaluators have independent access to sites and documents
• Maintain a complete, auditable record of audit and evaluation processes (requests, selection process, evidence provided, version history, management responses, action plans)
• Monitor corrective actions, deadlines, and underlying evidence
• Operate accessible, protected whistleblower and complaints channels for reporting and handling unethical or illegal activities within and outside the organisation
• Refer credible interference or capture signals to independent oversight bodies
Mitigation Resources
Require conflict-of-interest declarations, recusals, and documented conflict management for officials, advisers, and reviewers involved in appointing or overseeing audit and evaluation teams; exclude conflicted parties until conflicts are resolved and recorded.
Conflict-of-interest management and ethics controls — https://toolbox.infrastructuretransparency.org/resource/conflict-of-interest-management-and-ethics-controls/Set clear approval limits, sign-off steps, and separation of duties for appointing audit and evaluation teams, setting or changing terms of reference, granting access to records and sites, and approving management responses or closure so no single official can shape the assurance process end to end.
Approval authority and segregation of duties — https://toolbox.infrastructuretransparency.org/resource/approval-authority-and-segregation-of-duties/Publish and maintain public access to audit and evaluation terms of reference, findings, management responses, corrective action plans, and closure updates, with only lawful redactions.
Transparency and data disclosure standards — https://toolbox.infrastructuretransparency.org/resource/transparency-and-data-disclosure-standards/Failure Cases
Good Practices
Stakeholder Exposure
Exposure includes restricted transparency on audit findings; limited ability to secure effective remedy and follow‑up; accountability gaps for integrity and performance issues; and higher risk of intimidation and retaliation if findings and appointments are challenged.
Decision Point
During project operation, submit access to information to obtain audit and evaluation documentation, also mobilising communities to collect evidence of compliance with corrective plans. Decide whether to (a) escalate through oversight channels to report favouritism, or (b) monitor while safely gathering evidence.
Mitigation Actions
• Mobilise communities to collect evidence of compliance with corrective action plans
• Monitor O&M information to identify patterns of biased processes (repeat non-competitive appointments, late scope exclusions, restricted site and data access, unsupported draft changes, unexplained delays)
• Engage available grievance channels and oversight bodies to report signs of favouritism (use safe, confidential reporting and anonymisation where the risk of retaliation is significant)
Mitigation Resources
Review publicly disclosed audit and evaluation reports, annexes, management responses, corrective-action commitments, and closure updates; identify disclosure gaps, missing annexes, unexplained changes, or withheld findings, and raise concerns about non-disclosure with an oversight body.
Transparency and data disclosure standards — https://toolbox.infrastructuretransparency.org/resource/transparency-and-data-disclosure-standards/Use independent monitoring or social accountability to compare disclosed audit and evaluation findings with corrective-action commitments, closure evidence, and outcomes in practice; document unexplained gaps, track follow-up actions, and raise them through oversight channels.
Independent monitoring, assurance, and social accountability — https://toolbox.infrastructuretransparency.org/resource/independent-monitoring-assurance-and-social-accountability/Request access to non-public audit and evaluation records, such as annexes, draft changes, scope restrictions, access logs, management responses, or records explaining delayed publication or withheld findings, so capture indicators, missing rationales, or unexplained changes can be examined and raised through oversight channels.
Access-to-information and demand-side transparency — https://toolbox.infrastructuretransparency.org/resource/access-to-information-and-demand-side-transparency/