Is true auditor independence possible?
What kinds of actions, if any, do we take in our organizations to achieve a functional level of auditor independence?
Is compliance with Sarbanes-Oxley enough?
Or, does SOX go overboard in requiring needless procedures and costs?
Would we be better to require less auditing and let the legal system punish deceptive actors?