Judgment
Escalating findings without adding noise
Not every broken control deserves a red banner. Digital wallet programs generate constant exceptions; escalation without triage trains leadership to ignore you.
Three buckets
Raise now: customer funds at risk, identity controls failing on new wallets, or settlement breaks that can misstate balances. Document residual risk: known vendor gaps with compensating reviews and a dated remediation plan. Wait for data: when the extract is incomplete and a finding would rest on rumor.
Write the decision
Whatever bucket you choose, put the rationale in the workpaper. Future you—and the next auditor—should see why silence was intentional.
Protect the channel
If every weekly update is “urgent,” product stops reading. Reserve escalation paths for items that need decisions, not for status narration. Our finding-writing clinic practices shorter memos with clearer asks.