Illustrating non-conformities: The main goal of any audit report is to illustrate where the organization does not conform with whatever standard, rule, regulation or objective that it is supposed to. It is important to clearly identify the non-conformity, as well as the standard it does not conform to. It is then important to demonstrate which evidence you used to confirm the non-conformity. The goal is that each non-conformity will contain enough information so that the receivers of the audit report can change it. [1] X Research source Outlining positives: An audit report should not just include negatives. This is especially true for compliance reports, and operational audits. This allows the organization to focus on areas that are working and apply these to other areas. For example, if you are conducting a compliance audit to ensure an organization meets training requirements, you may say, “The audit reveals the current training program has exceeded requirements on-time and on-budget”. Opportunities for improvement: Beyond indicating things that are not conforming to requirements (non-conformities), it is important to also indicate high-risk areas, or areas that may be in compliance but are at risk of eventually not complying, or could be improved. [2] X Research source
Financial Audit: This is the most commonly known form of audit and refers to the systematic review of a company’s financial reporting to ensure all information is valid and conforms to GAAP standards. Operational Audit: An operational audit is a review of an organization’s usage of resources to ensure those resources are being utilized as efficiently and effectively as possible to accomplish the mission and goals of the organization. Compliance Audit: A compliance audit is performed to determine if an organization or program is operating in according with laws, policies, regulations, and procedures. Investigative Audit: These are typically commissioned when there is an assumed violation of rules, regulations, or laws, and may involve a blend of all the previously mentioned types of audit.
A clean opinion is used if an entity’s financial statements are a clear representation of an entity’s financial opinion. A qualified opinion is used when there were scope limitations on the auditor’s work. Scope limitations are restrictions on the audit caused by the client or other events that do not allow the auditor to complete all aspects of his or her audit procedures. An adverse opinion is used if financial information was misstated. A disclaimer opinion can be triggered by several different situations. For example, the auditor may not be independent or there are concerns with the auditee. [4] X Research source
Provide perspective for the reader, giving a fair balance of the positive and negative results of the audit. Be precise, and avoid redundant phrasing and inexact terminology. In interest of clarity, opt for shorter sentences over longer ones. A limit of 15 to 18 words is recommended in business writing. Also, avoid intensifiers like clearly, special, key, and reasonable as these lack precision. Do not use passive voice. Passive voice can be difficult to read. Instead of saying “No irregularity of operation was found” say “The audit team found no evidence of irregularity. " Use bullet points, which break up difficult information and make it clearer for the reader. Use gender neutral terms. Do not use audit buzzwords. Buzzwords are ambiguous, overused phrases like “generally improved,” “significant risk,” and “tighten controls. "
For example, if you are auditing the processes for a particular department of an organization, you may consider breaking the department up into several key sections and reporting findings that way.
Why was the audit conducted? What was included and not included in the audit? What was the time period audited? What were the audit objectives?[6] X Research source
A brief description of what was audited, objectives, scopes, and time periods. Statements of significant action plans. Overall statements of concerns and conclusions. Overall audit report rating. [8] X Research source
Criteria is an explanation of management goals and the standards use to evaluate the program, function, or activity audited. Condition is how effectively department management is meeting goals and/or achieving standards. Goals can either be fully achieved, partially achieved, or not achieved. Cause is a statement on the reason things have gone well or poorly. Possibilities include inadequate procedures, procedures not being followed, poor supervision, or unqualified employees. Effect states the result of the conditions, in quantifiable terms. Is the effect increased risk or exposure? Is it monetary cost? Is it poor performance? This should be addressed when you cover effect. [10] X Research source
Be positive. Focus on what is going right at the moment, and how the good aspects of the entity can be applied in ineffective areas. Be specific. Be very clear as to what specific aspects do not adhere to protocol, and to what concrete steps could be potentially implemented to ensure compliance. Identify who should act. Does the company need better employee performance or should management be picking up the pace? Make clear who needs to make changes. Keep recommendations brief. Be succinct - only include details that are necessary to your point. [11] X Research source
Include a cover page. The cover page should be three or four lines, and outline the subject of the audit report and the type of audit. A memo should follow the cover page. The memo should be one or two short paragraphs overviewing who and what was audited, who has received or is receiving the report, and plans for future distribution. A table of contents follows the memo, and it contains a catalogue of chapters, page numbers, sections, and suggestions of the audit. The report should be written in plainly-worded, non-technical language and use proper grammar and paragraph organization. Reports are organized by chapters, each with a title, and by sections and subsections, each marked with a heading. Headings should go from general to more specific. [12] X Research source
