IMO, if it's been going on a long time, there should be a trail of internal audit non-conformance's ,and those audit results being reviewed by the appropriate management, so it doesn't come down to "we had no idea this was happening". The internal audit system is the first line of defense of preventing things from eroding into a major QMS system malfunction.