>A real efficiency audit might need a lot of access to look for signs of hidden activity, but they’d never need to hide traces of what they did
In fact I would imagine they would do exactly the opposite because they would look at the mere ability to hide what they did as an audit finding.
"The new bank-manager has hired some friends of his to improve the security of the bank vault."
"We already have an audit from last year, we just need the funding to improv--"
"Oh, and they want to turn off all the security cameras next weekend. You'll know it's them because they'll be wearing masks."
"Sir, we have a responsibility to our customers, we can't ju--"
"Do it or you're fired."
monday morning:
manager: "the auditors found all of our money missing"
::silence::
manager: "they are clearly doing an amazing job, and you are all fired for allowing such fraud waste and abuse"