From a blog comment about Chinese fraudsters, a note about the whole certification regime.

[randomness]

From a comment in a blogpost about Chinese fraudsters, a somewhat related note about the ISO certification regime:

ISO900x - which sounded grand, but all it did was to say you had a repeatable process (so if your process was to dump every client complaint into a waste basket, and you could prove that no-one ever did anything else, you'd be ISO9000 for customer complaints procedures).

Comments

[achinhibitor.livejournal.com]

If the blogger is right, and auditors do not attest that the books are free of fraud -- then what is the point of auditors? Is not the point of auditing to certify that the company is as it is portrayed in the annual report?