Cynthia Cooper’s Extraordinary Circumstances: The Journey of a Corporate Whistleblower is the memoir of the vice president of internal audit whose team found the accounting fraud at WorldCom in 2002. Published by John Wiley & Sons in 2008, it runs two stories side by side. One is the growth of a long-distance company founded in Mississippi in 1983 into a telecommunications group that Time described as having been, for a time, the 25th-largest company in the United States, and its collapse into what was then the largest bankruptcy filing in American history. The other is the life of the auditor who built its internal audit department and who, in June 2002, took $3.8 billion of operating costs booked as capital spending to the board’s audit committee. For internal auditors the book is a first-person account, by the chief audit executive herself, of what happens when a function finds something that the executive it reports to does not want found: the request to delay, the search for evidence the function had not been allowed to see, the decision about whom to tell, and the personal cost afterwards.
This guide summarises the book in its own words without reproducing it, separates what the book says from what the public record shows, and reads the story against two official documents: the sworn statement WorldCom gave the Securities and Exchange Commission on 30 June 2002, and the report of the board’s special investigative committee of March 2003. It then maps the lessons to the Global Internal Audit Standards and to audit procedures, and ends with a worked example in which a drinks distributor’s audit function tests its own reporting line, access and escalation route in the 2027 plan. Readers who want the patterns that recur across scandals will find them in the corporate scandals guide; the summary here stays with the function at the centre of this one.
In this guide
- The book in one page
- Who Cynthia Cooper is, and how the book came about
- The structure: twenty-nine chapters
- The function she built, and what the investigators found about it
- The investigation: from a wireless reserve to $3.8 billion
- The aftermath, and the argument about ethics
- The nine ideas worth keeping
- The vocabulary: thirteen terms defined for practitioners
- What it means for internal audit: a lesson-by-lesson map
- The criticisms, and what the book leaves out
- Editions, reading time and how to read it
- A one-hour discussion guide for an audit team
- Worked example: MidState Beverage tests its own escalation route
- Frequently asked questions
- Related guides
The book in one page
| Question | The answer, in our words |
|---|---|
| What is it? | A memoir by WorldCom’s former vice president of internal audit, published by Wiley in 2008, that combines her life story with an insider’s account of the company’s rise, the 2002 investigation by her department and the legal aftermath. |
| What did her team find? | That WorldCom had moved line costs, the charges it paid other telephone companies for network capacity and to complete calls, out of operating expense and into capital accounts. WorldCom’s own sworn statement to the SEC put the transfers at $3.852 billion across the five quarters from the start of 2001 to March 2002. |
| How did the story end? | The chief financial officer was dismissed and the controller resigned on 25 June 2002; the company announced a restatement that day and filed for bankruptcy the following month. The former chief executive, Bernard Ebbers, was convicted in 2005 and sentenced to 25 years. |
| What is the book’s argument? | That ethical character is built one decision at a time, long before it is tested; that the tone set at the top of a company shapes the ethics of everyone below; and, in Cooper’s later words, that frauds are committed by ordinary people who rationalise small steps into large ones. |
| Why the title? | Cooper’s description of her team, quoted in the publisher’s description: ordinary people who found themselves facing extraordinary circumstances. |
| Why read it as an auditor? | Because it shows, from the inside, the conditions that let a fraud of that size run past an internal audit function: a reporting line to the chief financial officer, a mandate confined to operational audits, restricted access to the ledger, and a culture in which bad news did not travel. Each has a counterpart in the Global Internal Audit Standards. |
| Reading time | Our estimate is two long evenings for the hardback of about 400 pages; the chapters on the investigation reward a slower read than the personal ones. |
Who Cynthia Cooper is, and how the book came about
Cooper grew up in Clinton, Mississippi, the town that later became WorldCom’s headquarters. She graduated in accounting from Mississippi State University in 1986, took a master’s degree in accounting at the University of Alabama, and began her career in public accounting in Atlanta with Deloitte & Touche and Price Waterhouse. In 1991 she returned to Clinton with a young daughter, took contract work at LDDS, as WorldCom was then called, worked briefly at the paging company SkyTel, and in 1994 went back to LDDS to set up its internal audit department. She was promoted to vice president in 1999. After the fraud was disclosed she stayed for about two years, until the company emerged from bankruptcy as MCI, so that her staff could find other jobs, and in 2004 she left to start a consulting and training business on internal audit, internal controls, governance and ethics.
Time named her one of its three Persons of the Year for 2002, with Sherron Watkins of Enron and Coleen Rowley of the FBI, under the heading of the whistleblowers. Her later honours, as listed in her speaker biography, include being the first woman inducted into the AICPA’s Business Hall of Fame and an inaugural inductee of the IIA’s American Hall of Distinguished Audit Practitioners; she has chaired the Board of Regents of the Association of Certified Fraud Examiners and served on the PCAOB’s Standing Advisory Group. She wrote the foreword to Richard Chambers’s first book, Lessons Learned on the Audit Trail, in 2014, and in 2022 Chambers, by then retired as president of the IIA, interviewed her for his Agents of Change series and said that he recommends her book to internal audit leaders. She still speaks on ethics: to MBA students at Ivey Business School in 2025, and at the SCCE’s Compliance and Ethics Institute in 2026, where she urged compliance teams to stay in contact with whistleblowers rather than treating confidentiality as a reason for silence.
The book appeared in 2008, three years after Ebbers’s conviction. Cooper told Time when it came out that she wrote it for two reasons: to give other whistleblowers the account of what they would go through that she had not had herself, and to show how people who commit fraud think, because she believed that preventing fraud depends on understanding the motive. She gave the book’s profits to ethics education for students. It is written as a memoir rather than a forensic report, personal material runs alongside the corporate story, and it ends with an epilogue, notes and an index. For the place of 2002 in the profession’s longer story, see the history of internal audit; the book is the view of that year from one desk in Clinton.
The structure: twenty-nine chapters
The book has an introduction, twenty-nine short chapters, an epilogue, notes and an index. It is not divided into parts. The table lists the chapters exactly as they appear in the contents, with the page on which each opens in the Wiley hardback, so that a reader can find a passage or plan a reading. The titles are the book’s; the remarks below the table are ours.
| Chapter | Title | Opens on page |
|---|---|---|
| Introduction | Introduction | vii |
| 1 | A Dark Cloud | 1 |
| 2 | Graduation Day | 12 |
| 3 | New Beginnings | 26 |
| 4 | Hotlanta | 41 |
| 5 | The Turnaround | 50 |
| 6 | Coming Home | 60 |
| 7 | Building a New Life | 71 |
| 8 | King of the Resellers | 82 |
| 9 | The Hottest Company in Town | 91 |
| 10 | Nowhere to Go But Up | 105 |
| 11 | A New Era | 123 |
| 12 | The Glass Sieve | 137 |
| 13 | The Tide Comes In | 145 |
| 14 | The Minnow Swallows the Whale | 151 |
| 15 | Finding Balance | 163 |
| 16 | Top of the Mountain | 167 |
| 17 | A Double-Edged Sword | 174 |
| 18 | A Titan Stumbles | 184 |
| 19 | The Rule of Ten | 202 |
| 20 | What Is Prepaid Capacity? | 217 |
| 21 | Growing Suspicions | 229 |
| 22 | A Surprise Visit | 242 |
| 23 | The Confrontation | 251 |
| 24 | A Desperate Search for Counsel | 265 |
| 25 | Washington Attorneys Visit the Deep South | 280 |
| 26 | Navigating the Storm | 296 |
| 27 | A Visit to Federal Court | 322 |
| 28 | The United States Versus Bernard J. Ebbers | 338 |
| 29 | The Judgment | 351 |
| Epilogue | Epilogue | 362 |
Read in order, the titles trace the arc the publisher describes: a Mississippi upbringing and a career in public accounting, the years in which the company grew by acquisition and Cooper built her department, the investigation, and the legal consequences. Three titles are worth noting before starting. “What Is Prepaid Capacity?” names the balance-sheet label under which the line costs had been parked, the question Cooper was asking in the summer of 2002. “A Desperate Search for Counsel” signals a problem most chief audit executives never plan for: where to get legal advice of their own when the company’s lawyers act for the company. And the last three chapters, by their titles, take the story into the federal courts and the trial of the former chief executive. We have not tied any other event to a particular chapter.
The function she built, and what the investigators found about it
Cooper’s department was set up to do operational audits, looking at budgets, performance and waste, while Arthur Andersen audited the financial statements. Time’s 2002 profile, drawn from interviews with her and her colleagues, describes a founder’s company in which internal audit had to prove that it paid for itself. Ebbers, Time reported, had told her not to use the phrase internal control, and she won the department its place by showing that it could find millions of dollars of waste. That origin matters, because it explains why a competent function was pointed away from the place the fraud would be.
The board’s special investigative committee, three directors who were all new to the board, advised by the law firm Wilmer, Cutler & Pickering and by PwC, reported on 31 March 2003. Its report is a detailed official account of the fraud, and it describes Cooper’s function from the outside. Its findings read as a list of the conditions under which an internal audit function cannot find a financial reporting fraud even when it is competent and honest. The table sets them out with the safeguards the 2024 Standards now attach to each.
| What the committee found | Why it mattered | The modern safeguard |
|---|---|---|
| Internal audit reported in most respects to the chief financial officer, Scott Sullivan | The executive who directed the improper entries controlled the function that might have found them | Principle 7 of the Global Internal Audit Standards, positioned independently, and Standard 7.1 on organisational independence; the independence guide gives the tests |
| Until 2002 its duties generally did not include financial reporting; it did mainly operational audits, and management strongly influenced which audits it did | The highest-risk area in the company sat outside the plan by design | A risk-based plan (Standard 9.4) and a charter, the subject of Standard 6.2, that does not carve out financial reporting; the charter guide |
| In July 2001 the controller, David Myers, told the employee who managed security for the accounting system not to give internal audit access to the area showing corporate adjustments, and the instruction was followed | The function could not see the top-side entries in which the fraud was recorded | A tested right of access to records, and a check that the function can see journal entries posted outside the subledgers; the journal entry guide |
| In 1999 Sullivan told the senior vice president of financial operations, Ron Lomenzo, not to give Cooper the total picture of the revenue data | Information was filtered before it reached the auditors | Board and senior management support for the function (Standard 6.3); the authority and limits guide covers refused access |
| Before April 2002 no employee was reported to have raised accounting irregularities with internal audit; some believed it reported to Sullivan, and one said raising concerns would have put his job at risk | A function that staff see as finance’s instrument hears nothing | Confidential reporting routes owned by the audit committee, required of listed companies’ audit committees by section 301 of the Sarbanes-Oxley Act; the ethics and compliance programme guide |
| The board was deferential to Ebbers and passive in its oversight until April 2002, and approved more than $400 million of loans and guarantees to him | Nobody was overseeing the person at the top | Testing of board oversight itself; the corporate governance audit guide |
| The committee concluded that Ebbers was the source of the culture, and of much of the pressure, from which the fraud grew; it found no direct evidence that he knew of the capitalisation, though Sullivan said he did | Tone at the top was a cause, not a background condition | Culture as an audit subject; the culture audit guide |
None of these was a failure of technique. The function’s mandate, its access and its reporting line had each been set by the people it might one day need to audit, and the committee’s findings show how little of that the board could see. The 2024 Standards, published in January 2024 and effective from 9 January 2025, bind internal auditors and describe in their essential conditions what boards and senior management should do to make the function’s position real; the GIAS Domain III guide describes how those decisions are allocated. Cooper’s book shows why the allocation matters, because it follows a chief audit executive working inside the arrangement the committee later described.
The investigation: from a wireless reserve to $3.8 billion
The investigation began with something small. In March 2002, by Cooper’s account to Time, an executive in the wireless division told her that corporate accounting had taken $400 million from a reserve in his unit to support the company’s reported income. When she raised it, Andersen told her it was not a problem and Sullivan told her to back off. The episode did not uncover the fraud, but it changed how she saw the people she reported to, and a study guide to the book describes an internal audit review of the wireless business in early 2002. Ebbers resigned at the end of April. In May, as KPMG took over from Andersen as external auditor, her department began a review of capital expenditure, which the special investigative committee notes was pursued despite discouragement from Sullivan and Myers. Her colleague Glyn Smith was with her at two of the key meetings; the team worked late and kept the project quiet, and one member bought a CD burner to copy data in case it disappeared.
What they found was simple in form. WorldCom had transferred billions of dollars of line costs, recurring charges for capacity and call completion that should have been expensed as incurred, into capital accounts, where they would be spread over future years. Time reported that the treatment turned a 2001 loss of $662 million into a profit of $2.4 billion. A 2008 review of the book on the Fraud Files blog singled out how clearly it explains the entries for readers without accounting training, how many entries were involved, how unwilling the executives were to have the internal auditors examine them, and Sullivan’s search for an accounting rule that would justify the treatment. The table follows the sequence WorldCom itself gave the SEC in its sworn statement of 30 June 2002, adds Ebbers’s resignation from the company’s filings, and marks the two events that come from Time’s reporting.
| When (2002) | What happened | What it shows an auditor |
|---|---|---|
| March | A wireless executive complains that $400 million has been taken from his reserve to support income; Andersen sees no problem and Sullivan tells Cooper to back off (Time) | The first signal came through an operating manager, not through a control |
| 29 April | Ebbers resigns as chief executive | A change at the top opened a window the function used |
| 16 May | KPMG replaces Arthur Andersen as external auditor | A new auditor with no stake in the past numbers |
| May | Cooper’s department begins examining capital expenditure; by mid-June it has found transfers of line costs from expense to capital in 2001 and the first quarter of 2002 and raised them with Sullivan and Myers | Testing the balance sheet for what should have been expense |
| 11 June | Sullivan asks Cooper to delay the audit; she refuses (Time) | A request to delay is itself evidence |
| About 12 June | Cooper and Smith brief the audit committee chairman, Max Bobbitt, who asks her to contact KPMG’s engagement partner, Farrell Malone; they speak that day | Going to the audit committee chair directly, and bringing in the external auditor |
| About 17 June | Cooper and Smith interview the controller, Myers, who, the investigators later found, acknowledged to the internal auditors that he could not support the capitalisation | The admission is obtained and documented before the committee meets |
| 20 June | The audit committee meets; KPMG says the transfers do not comply with GAAP; Sullivan defends them and proposes a write-down instead; the committee reconvenes on 24 June | The executive’s explanation is heard and tested, not dismissed |
| 24 June | Andersen says its 2001 opinion can no longer be relied on; the committee concludes that a restatement is needed; Sullivan and Myers are told to resign or be dismissed | Twelve days from briefing the chair to a decision |
| 25 June | The board dismisses Sullivan, accepts Myers’s resignation, meets the SEC staff and announces that $3.852 billion was improperly transferred | Disclosure on the day of the board decision |
The sworn statement gives the quarterly transfers as $771 million, $610 million, $743 million and $931 million for the four quarters of 2001, and $797 million for the first quarter of 2002. The investigation did not stop there. By the time the special investigative committee reported in March 2003 it had identified more than $9 billion of false or unsupported entries from 1999 to 2002, including about $3.3 billion of improper releases of accruals in 1999 and 2000 that had reduced line costs before the capitalisation began; the committee found that the accruals were essentially exhausted by the end of 2000, which is when the second scheme took over. The figure usually cited since, as in NPR’s 2020 obituary of Ebbers, is $11 billion. The fixed assets guide covers the capitalisation test that would have caught the second scheme, and the financial statement fraud guide the reserve manipulation that preceded it.
Two features of the sequence deserve an auditor’s attention. The first is the order of the steps: questions to the chief financial officer and the controller, a briefing for the audit committee chair, the new external auditor brought in the same day, a second interview with the controller, and a meeting at which the committee heard the chief financial officer’s case before it decided. The second is the speed. Once the chair had the evidence, the committee, the external auditor and the board moved within two weeks, and the company, not a regulator, made the announcement. Both are reproducible in any organisation that has agreed in advance how a chief audit executive escalates, and the escalation ladder sets out that agreement.
The aftermath, and the argument about ethics
The last chapters, judging by their titles, follow the legal consequences: the search for counsel, the visits from Washington lawyers, the federal court and the trial of Bernard Ebbers. A study guide to the book describes Cooper and Smith making many trips to Washington and New York to meet prosecutors, FBI agents and SEC officials, and Time reported that journalists went to her home and her parents’ home in July 2002. The public record of what followed is in the table, brought up to 2026.
| Event | When | Detail |
|---|---|---|
| Chapter 11 filing | July 2002 | In the Southern District of New York, with $107 billion of assets and $41 billion of debt; the largest US bankruptcy filing to that date, above Enron’s $63.4 billion |
| Sarbanes-Oxley Act | 30 July 2002 | Approved five weeks after the disclosure; section 301 requires audit committees to set up procedures for complaints about accounting and auditing, including confidential, anonymous submissions by employees, and section 806 protects employees who provide evidence of fraud |
| Time Persons of the Year | December 2002 | Cooper, Watkins and Rowley named together as the whistleblowers |
| Special investigative committee report | 31 March 2003 | More than $9 billion of false or unsupported entries; internal audit’s reporting line, mandate and access described |
| Emergence as MCI | 2004 | The company leaves bankruptcy under the MCI name; Cooper leaves the same year |
| Ebbers convicted | 15 March 2005 | Nine counts: conspiracy, securities fraud and seven false filings; sentenced to 25 years; conviction and sentence affirmed by the Second Circuit on 28 July 2006 |
| Verizon acquisition | January 2006 | MCI acquired by Verizon |
| Other defendants | By 2008 | Sullivan pleaded guilty, testified for the government and received five years; Myers and the accounting director Buddy Yates each received a year and a day in 2005 |
| Ebbers released | December 2019 | Released early on health grounds after about 13 years; he died in February 2020, aged 78 |
The publisher’s description puts the book’s argument in two propositions: that ethical decision-making begins in childhood and is built one decision at a time, and that the tone set at the top of an organisation shapes the ethics of the workplace below it. In interviews since, Cooper has added the points an auditor can use. She told Time in 2008 that frauds usually begin small and grow as people rationalise them, that major frauds involve collusion reaching high into a company, and that she would blow the whistle again because she saw only one right course. In 2022 she told Chambers that the complicit mid-level managers were ordinary people who made terrible decisions, that empathy, even for those who commit fraud, makes auditors better, and that the large scandals come from pride, greed, fear and misguided loyalty. She defined integrity as having well-defined values and the courage to live by them, and she has credited her mother’s advice never to be intimidated. She also does not claim that the fraud destroyed the company: she told Time that WorldCom’s decline came from its debt, poor acquisitions, the dot-com bust and the telecommunications downturn.
The other subject is cost. Time’s 2002 profile recorded colleagues who stopped talking to her, a friend’s account that she had been passed over for promotion, and the toll on her health and family, and the book gives the same period at length. At the 2026 SCCE institute she said that negative consequences for whistleblowers had been close to universal in her experience. For an audit function the practical lesson is that the people who bring the evidence, inside and outside the department, need support that does not depend on the goodwill of the executives they have reported. The first 48 hours protocol covers the evidence; the people need an arrangement made before anyone needs it.
The nine ideas worth keeping
- Fraud starts small. Cooper’s own summary: frauds usually begin small and grow as the people involved rationalise each step. The controls that matter are the ones that catch the first entry, not the hundredth.
- A request to delay is evidence. The guide’s reading of 11 June: Sullivan’s request told the function as much as any document. An auditor who is asked to wait should record the request, the reason given and the person who asked.
- The reporting line decides what the function can see. The committee found internal audit reporting to the chief financial officer, confined mainly to operational audits and denied access to corporate adjustments. Each restriction had been set by people the function might have needed to audit.
- Test the balance sheet for what should have been expense. Released accruals and capitalised operating costs are two familiar ways to manufacture profit, and WorldCom used both in sequence; the journal entry analytics catalogue has the tests.
- Go to the chair with evidence and options. Cooper’s advice to chief audit executives, in her 2022 interview with Chambers: check the facts, separate them from emotion, prepare thoroughly and offer options for resolution.
- The external auditor can be an ally. The change of auditor in May 2002 gave the function a partner with no stake in the past numbers, and the committee chair brought KPMG in on the day he was briefed. Coordination with the external auditor (Standard 9.5) is a channel as well as an efficiency.
- Collusion reaches up. Cooper’s point is that major frauds involve people at high levels acting together. In the guide’s reading, that is why segregation of duties did not help: the people segregated were cooperating. Management override is a fraud risk in its own right.
- Ordinary people make the entries. Cooper describes the complicit mid-level managers as ordinary people who made terrible decisions. An ethics programme aimed only at villains misses the people most likely to be asked to do something wrong.
- Courage is a professional requirement. Standard 1.1 of the Global Internal Audit Standards now names professional courage; Cooper’s definition of integrity, clear values and the courage to live by them, is the personal version. The GIAS ethics guide covers the Standard.
The vocabulary: thirteen terms defined for practitioners
| Term | What it means in the book’s story | What it looks like in an audit |
|---|---|---|
| Line costs | Charges WorldCom paid other telephone companies for network capacity and to complete calls | A major operating cost whose trend should move with traffic volumes; analytics on the ratio of cost to revenue |
| Capitalisation | Recording a cost as an asset to be expensed over future periods | Tests that capital additions create a future benefit; the fixed assets guide |
| Prepaid capacity | The balance-sheet label attached to some of the transferred line costs | An asset account whose name describes nothing the business owns; ask what is in it |
| Accrual release | Reducing a reserve and crediting the income statement | Reserve roll-forwards; releases near period end tested for support |
| Corporate adjustment | An entry posted centrally rather than through a subledger | Top-side journal entries; the function’s access to them |
| Operational audit | An audit of efficiency, waste and performance rather than financial reporting | A plan that excludes financial reporting by design is a scoping risk |
| Reporting line | To whom the chief audit executive answers | Functional reporting to the board; an administrative line that cannot block access or budget |
| Audit committee chair | The director Cooper briefed on or about 12 June | The first rung of the escalation route; private sessions without management |
| Restatement | Correcting financial statements already issued | The outcome a fraud finding may force; the deficiency evaluation guide |
| Whistleblower | A person who reports wrongdoing to those who can act on it | Hotline governance, non-retaliation and case follow-up |
| Tone at the top | The ethical climate set by the most senior leaders | Culture audits; the board’s oversight of the chief executive |
| Collusion | Several people acting together to defeat controls | Management override testing; controls that do not rely on one person’s honesty |
| Professional courage | Communicating truthfully and acting even when it is difficult (GIAS Standard 1.1) | An escalation protocol agreed in advance; the chief audit executive’s readiness to leave |
What it means for internal audit: a lesson-by-lesson map
The book was written about one company in one year, but the conditions it describes are the ones a quality assessment or an audit committee should test in any function. The map takes each lesson to the procedure it changes, with the guides that carry the detail. The fraud risk management guide is the framework for the accounting schemes and the independence guide for the position of the function.
| Audit activity | What the book implies | Procedure it changes |
|---|---|---|
| Charter and reporting line | A function reporting to the chief financial officer, confined to operational audits, could not see the fraud | Read the charter for exclusions; confirm who approves the plan, the budget and the chief audit executive’s pay; the charter guide |
| Access to records | Access to corporate adjustments was withdrawn without the board knowing | An annual test that the function can query the whole general ledger, including top-side entries, with any restriction reported to the audit committee |
| Journal entry and capitalisation testing | Billions moved from expense to capital through manual entries | Analytics on manual entries to asset accounts by amount, timing and poster; the journal entry analytics catalogue |
| Reserves and accruals | Accrual releases reduced costs before the capitalisation began | Roll-forward of material reserves, with support for every release above a threshold and a look at releases in the last week of each quarter |
| Escalation | The chief audit executive went to the audit committee chair and the new external auditor, with evidence, before the confrontation | A written escalation protocol agreed with the chair in advance; the escalation ladder |
| Fraud response | Evidence and people both need protecting from the first day | Preserve data, involve counsel, limit circulation; the first 48 hours protocol |
| Whistleblower channels | Staff did not see internal audit as a safe route | Test that accounting complaints reach the audit committee without passing through finance; case handling and non-retaliation |
| Culture and tone at the top | The investigators traced the fraud to the culture the chief executive set | A culture review that includes the board’s oversight of the chief executive; the culture audit guide |
Two procedures in the map deserve emphasis because they are cheap and rarely performed. The access test takes an afternoon: an auditor tries to query every journal entry posted in a period and records what the system refuses. And the escalation protocol takes one meeting: the chief audit executive and the audit committee chair agree in writing what happens if a senior executive asks for an audit to stop, who is called and in what order, and how the chief audit executive obtains legal advice. Neither requires a fraud to justify it. The guide to presenting to the audit committee helps with raising both, and for listed companies the SOX 404 guide gives the wider framework of internal control over financial reporting.
The criticisms, and what the book leaves out
Reviewers in 2008 agreed on the book’s strength and its weakness. Publishers Weekly found the corporate narrative thorough and its picture of the boardrooms and backrooms the best part, and the autobiographical material less engaging, with anecdotes about schooling, family advice and personal details it found distracting. The Fraud Files review made the same complaint about the family stories and background sketches while praising the explanation of the accounting. An auditor reading for the case can take the advice implicit in both reviews and move quickly through the personal chapters, though they carry the book’s argument that character is formed long before it is tested.
A memoir by a participant is one person’s account and has to be read as one. The official chronology in WorldCom’s sworn statement shows an audit committee chair who, once briefed, brought in the new external auditor the same day and reached a decision within twelve days. Cooper’s account, as reviewers and Chambers have described it, is of an audit committee that was less supportive than that record suggests; Chambers said in 2022 that she acted without the committee’s enthusiastic backing. Both can be true: the record shows what was decided and when, the memoir what it took to push it. An auditor using the book as a case study should read it beside the sworn statement and the special investigative committee’s report, both of which are public.
What the book leaves out is mostly what came after it. It predates the SEC whistleblower programme, which pays 10 to 30 percent of the money collected when original information leads to sanctions above $1 million and had paid almost $2 billion to nearly 400 people by the end of fiscal 2023. It predates the 2024 Standards, which name professional courage and set out the function’s authority and independence in Principles 6 and 7. It predates the end of Ebbers’s story, his release in 2019 and death in 2020. And as a memoir it is not a controls manual: it explains the entries but does not set out an audit programme, which is what the map above and the journal entry guide supply.
Editions, reading time and how to read it
| What | Details | Best for |
|---|---|---|
| Hardback | John Wiley & Sons, 2008, ISBN 978-0-470-12429-1; about 400 pages (Google Books lists 402) | The first edition |
| E-book | Wiley, 2008, ISBN 978-0-470-24673-3 | Searching for names and dates |
| Paperback | Wiley reprint, 2009, ISBN 978-0-470-44331-6 | Readers who prefer paper |
| Reading plan | The personal chapters at speed; the run from “What Is Prepaid Capacity?” to “The Confrontation” slowly; the epilogue | An auditor with two evenings |
| Read alongside | WorldCom’s sworn statement to the SEC of 30 June 2002 and the special investigative committee’s report of 31 March 2003 | Checking the memoir against the record |
| Companion reading | The Smartest Guys in the Room summary for Enron, the other 2002 case; the Why They Do It summary for the psychology of executives who commit fraud; Chambers’s Lessons Learned on the Audit Trail (2014), for which Cooper wrote the foreword | Placing the case |
Read the book with one question in mind: at each point, who could have stopped the work, and why did they not? In 2001 it was the controller, who could withdraw the function’s access with an instruction to a systems administrator. In March 2002 it was the chief financial officer, who could tell the chief audit executive to back off. In June it was the same man asking for a delay, and then the audit committee, which could have accepted his proposal of a write-down. The book is worth reading for the moment each of those gates failed to close, and an auditor reads governance the same way, by finding the gate and asking who holds it.
A one-hour discussion guide for an audit team
- Ten minutes: the reporting line. Read the charter aloud. Who approves the plan, the budget and the chief audit executive’s objectives and pay? Could any of them, alone, stop an audit of financial reporting?
- Ten minutes: the access test. Can the function query every journal entry in the general ledger today, including top-side and consolidation entries, without asking finance? If not, who decided, and does the audit committee know?
- Fifteen minutes: the delay request. Each auditor describes a time they were asked to wait. What was the reason given, was it recorded, and what happened next? Agree what the team will record in future.
- Fifteen minutes: the escalation route. Walk through what the chief audit executive would do tomorrow if the chief financial officer asked for an audit to stop: whom she calls, in what order, with what evidence, and where she gets legal advice. Compare the answer with the escalation ladder.
- Ten minutes: the cost. Discuss what support the function gives a colleague who brings forward evidence of wrongdoing, and what the audit committee would do if the chief audit executive were removed. Write down the gaps for the next private session with the chair.
Worked example: MidState Beverage tests its own escalation route
MidState Beverage is a fictional drinks distributor operating in three states, with a board audit committee and an internal audit function of six that reports functionally to the committee and administratively to the chief financial officer. Its bank facility carries an earnings covenant, and its results in the second half of 2026 came close to the limit. For the 2027 plan the chief audit executive proposed, and the audit committee chair agreed, a review built on the conditions the WorldCom committee had described: the function’s own reporting line, mandate, access and escalation route, followed by tests of the two accounting schemes the case made familiar.
| Test | What the function found | Result |
|---|---|---|
| Reporting line and charter | The charter gave the chief audit executive a functional line to the committee, but the chief financial officer set the function’s budget and the chief audit executive’s annual objectives, and the plan had excluded financial reporting on the assumption that the external auditor covered it | Charter amended: budget and objectives approved by the audit committee; financial reporting brought into the risk assessment |
| Access | Read-only access to the ERP covered the subledgers but not the consolidation module, where 412 manual entries had been posted in 2026; access had never been requested and never refused | Access granted; added to the annual confirmation the chief audit executive gives the committee |
| Capitalisation | Analytics on fleet asset additions found $2.6 million of routine truck repairs and tyres capitalised as fleet refurbishment across two quarters, all booked by the same senior accountant | Reclassified to expense; capitalisation policy rewritten with a definition and threshold; reported to the audit committee as a significant control deficiency |
| Accrual releases | Supplier rebate accruals were released by $1.9 million in the last week of the third quarter, with support for $0.7 million | The unsupported $1.2 million reversed; releases above $100,000 now need the controller’s documented support and a quarterly review by internal audit |
| Delay request | When fieldwork reached the consolidation entries, the chief financial officer asked for the work to be deferred until after the year-end audit; the chief audit executive recorded the request and told the audit committee chair the same day, as the new protocol required | Fieldwork continued; the chair asked the chief financial officer to attend the next private session |
| Hotline | The ethics hotline was run by human resources, and accounting reports reached the chief financial officer before the committee; two finance-related reports in 2026 had been closed by finance | Accounting reports now go to the audit committee chair and the chief audit executive directly |
| Counsel | No arrangement existed for the function to obtain legal advice independent of management | The committee approved a standing arrangement with outside counsel retained by the committee |
In 2027 the function reported three findings and four observations. The capitalisation and rebate issues were judged to be errors made under covenant pressure rather than fraud; the external auditor agreed with the corrections, and the adjustments were booked in the year without a restatement. The chief financial officer accepted the charter changes and said at the private session that he had asked for the delay to protect the year-end timetable; the committee recorded the explanation and kept the protocol. The deficiency evaluation guide describes how the capitalisation issue was classified, and the audit committee playbook how the chair used the private session.
The order of the tests is the point of the exercise. The function did not begin by looking for fraud; it began by checking whether it could see the places where fraud would be, and whether anyone could stop it from looking. The two accounting findings followed from the access change, and the delay request arrived exactly when the work reached the entries nobody had examined before. That is the reading of the book an audit committee can use: the competence of Cooper’s team was never in question, but its position was, and position is something a board can fix in a single meeting before anyone needs it.
Frequently asked questions
Is Extraordinary Circumstances a memoir or a fraud case study?
Both, and reviewers in 2008 thought the corporate story the stronger half. The personal chapters explain who Cooper was before 2002; the investigation chapters are the ones an auditor will reread. Read them beside WorldCom’s sworn statement to the SEC of 30 June 2002, which gives the official chronology.
How did the WorldCom fraud work?
Two schemes in sequence. In 1999 and 2000 the company released accruals to reduce reported line costs, about $3.3 billion according to the board’s investigation; from 2001 it moved line costs into capital accounts, $3.852 billion in the five quarters to March 2002 according to its own sworn statement. The financial statement fraud guide describes both patterns.
Whom did Cooper report to?
In most respects to the chief financial officer, Scott Sullivan, according to the special investigative committee, which also found that the function had been confined mainly to operational audits and kept out of the system area holding corporate adjustments. She took her findings to the audit committee chair, Max Bobbitt, in June 2002.
What happened to the executives?
Ebbers was convicted on nine counts in March 2005 and sentenced to 25 years; he was released on health grounds in December 2019 and died in February 2020. Sullivan pleaded guilty, testified against him and received five years. Myers and the accounting director Buddy Yates each received a year and a day.
Is the book still relevant under the 2024 Global Internal Audit Standards?
Yes, because it shows what the absence of the Standards’ safeguards looks like. The Standards name professional courage in Standard 1.1 and set out the function’s authority, charter, board support and independence in Principles 6 and 7. The GIAS ethics guide covers the first and the Domain III guide the second.
Where does the book sit in the reading list?
In the profession section of the internal audit reading list, as the account of the job told from the chief audit executive’s side.
Related guides
- Audit Lessons From Corporate Scandals — twelve cases, seven patterns and ten tests
- Financial Statement Fraud: How the Numbers Get Cooked and Who Should Catch It — capitalised costs and released reserves
- How to Audit Journal Entries: The Management Override Lens — the top-side entries the function could not see
- When Internal Audit Finds Fraud: The First 48 Hours Protocol — what to do in the days after the finding
- Independence and Objectivity: What They Mean, How They Break, How to Protect Them — the reporting-line problem, and how to test it
- The Escalation Ladder: When and How to Go Over Someone’s Head — the route Cooper took, written down in advance
- The Best Books for Internal Auditors — where this book sits among the others
- All book summaries — the full set of summaries for auditors
- Trusted Advisors by Richard Chambers: Summary and Lessons for Internal Auditors — the attributes of outstanding internal auditors
- The Speed of Risk by Richard Chambers: Summary and Lessons for Internal Auditors — audit plans that keep up with risk
Leave a Reply