People responsible for policing contractors such as Carillion often sit on company boards, research finds