Skip to main content
NFRisk Non-Financial Risk advisory Start a Conversation
NFR-0085 Evidence-controlled risk scenario

Volkswagen AG

When software could recognise the test, could certification still be trusted?

Volkswagen pleaded guilty in 2017 to three federal felonies after software distinguished emissions testing from normal driving; the US federal resolution totalled $4.3 billion and concerned approximately 590,000 diesel vehicles.

Conduct & Governance Risk Data & Control Integrity Physical, Safety & Environmental Risk System & back-out testing Control assurance Data integrity Governance & escalation Conduct & incentives

Documented impact

590,000 vehicles US diesel vehicles implicated
$4.3bn US federal criminal and civil resolution
3 counts Federal felony counts
6 individuals Executives and employees indicted

Authoritative findings

The documented event

On 11 January 2017, the DOJ announced that Volkswagen AG had agreed to plead guilty and pay $4.3 billion in criminal and civil penalties. Volkswagen entered the guilty plea in federal court in Detroit on 10 March 2017 to three felony counts: conspiracy to defraud the United States, engage in wire fraud and violate the Clean Air Act; obstruction of justice; and importation of merchandise by false statements. DOJ charging documents said Volkswagen engineers began the project in 2006 and designed software that recognised whether a vehicle was undergoing official emissions testing or normal road use. The software selected a compliant mode for the test and a different mode in normal operation. Approximately 590,000 US diesel vehicles were implicated. The resolution comprised a $2.8 billion criminal penalty and $1.5 billion in civil penalties. Six Volkswagen executives and employees were indicted, and the plea agreement provided for three years of probation and an independent compliance monitor.

Hypothetical institutional scenario

How might the same control pattern appear?

A product must pass a formal certification test before release. The engineering team designing the product also controls how it recognises and responds to the test conditions. Validation uses predictable inputs, and no independent team compares certified behaviour with ordinary operation. The product can therefore pass the test while operating differently in the real world.

Stress-test questions

Questions for challenge and assurance

  1. Audit

    Can the product or process detect that it is being tested and behave differently from normal operation?

  2. Technology

    Is certification testing independent of the team that designed the product, and does it include unpredictable or in-use conditions?

  3. Operations

    Who monitors for divergence between certified results and real-world performance after release?

  4. Board

    Would evidence of deliberate control circumvention trigger a different escalation, investigation and accountability route from an accidental defect?

NFRisk practitioner interpretation

Control implication

A control test that the target can detect is not reliable evidence of normal operation. Assurance should include independence from the product team, unpredictable or in-use testing, comparison of test and real-world outputs, monitoring for mode-dependent behaviour and an escalation route for deliberate circumvention. Intentional manipulation is a governance and control-integrity failure, not merely a testing defect.

Framework relevance

Explicitly labelled analytical mappings

NFRisk analytical mapping

COSO ERM lens: Governance & Culture

NFRisk maps the deliberate design of software to defeat a compliance test to COSO's Governance & Culture component. This is a retrospective analytical mapping, not a DOJ or COSO finding about Volkswagen.

Enterprise Risk Management - Integrating with Strategy and Performance · Committee of Sponsoring Organizations of the Treadway Commission (COSO)

Evidence register

Primary and supporting sources

  1. US Department of Justice

    Volkswagen AG Agrees to Plead Guilty and Pay $4.3 Billion in Criminal and Civil Penalties; Six Volkswagen Executives and Employees Are Indicted (opens in a new tab) 11 January 2017 · Authoritative primary source

  2. US Department of Justice

    Volkswagen AG Pleads Guilty in Connection with Conspiracy to Cheat U.S. Emissions Tests (opens in a new tab) 10 March 2017 · Authoritative primary source

  3. COSO

    Enterprise Risk Management - Integrating with Strategy and Performance (opens in a new tab) 1 June 2017 · Authoritative primary source

Publication note

A documented external event—not an NFRisk client engagement.

The named organisations are included because authoritative sources document the event. Their inclusion does not imply that they are or were NFRisk clients, that they endorse this analysis, or that NFRisk participated in the event or response. Framework relevance and NFRisk practitioner interpretation are analytical layers applied after the event.

Return to the Risk Scenario Library

From scenario to mandate

Test the equivalent control assumption in your environment.

NFRisk can use this scenario as a starting point for a focused structural diagnostic, risk-architecture review or delivery-assurance discussion.

Start a conversation