P&N is now EisnerAmper

Effective May 21, 2023, P&N has joined EisnerAmper. Read the full announcement here.

Assurance Services • Published 7/23/2021 Oh No, an Audit Finding


There are many misconceptions about what it means to have a finding reported in the schedule of findings and questioned costs. Some individuals believe that a finding means they could lose their job, while others may ignore the information altogether. So, what is an audit finding? Why is it important? What does it tell us? To answer these questions, one must first understand why the auditor has to report findings to you.

What is the purpose of an audit?

If your organization receives state or federal funds, you are probably aware that there are specific reporting requirements as a recipient of these funds. Your year-end reporting package as required by Government Auditing Standards, Uniform Guidance, and the Louisiana Audit Guide includes several auditor-prepared reports, including:

  • The auditor’s report on the financial statements;
  • A report on internal control over financial reporting and compliance and other matters;
  • A report on compliance for each major program and on internal control over compliance; and
  • A schedule of findings and questioned costs.

An audit is designed to provide assurance on the financial statements. An audit is not designed to identify deficiencies in internal control or areas of noncompliance. Nonetheless, an auditor reviews the internal controls to determine the audit strategy and compliance with certain laws, regulations, contracts, and/or grants in order to determine whether the financial statements might be misstated as a result of that noncompliance.

What is an audit finding?

In that process of reviewing internal controls and compliance, if an auditor identifies internal control issues or instances of noncompliance, authoritative standards require that they report such matters in writing. There are two types of internal control findings which may be identified by the auditor. These are as follows:

  • A significant deficiency is a deficiency, or a combination of deficiencies, in internal control that is less severe than a material weakness, yet important enough to merit attention by those charged with governance.
  • A material weakness is a deficiency, or combination of deficiencies, in internal control that leads to a reasonable possibility that a material misstatement of the entity’s financial statements will not be prevented, or detected and corrected, on a timely basis.

Noncompliance might involve a range of issues, including those pertaining to federal or state grants, payroll matters, restrictions of tax propositions, violations of debt covenants, state bid law, the Local Government Budget Act, or others that could affect the financial statements. It is important to remember that a compliance finding is often an indicator of a potential deficiency in internal control over compliance. It could, therefore, result in a finding in both areas as the picture below illustrates:Audit internal controls compliance finding

Evaluating a compliance finding

When evaluating a compliance finding, one should consider the frequency, nature, adequacy of the organization’s system for monitoring compliance, and the possible effects of any noncompliance to the financial condition of the organization—or its impacts to current and future grant funding.

For internal controls, the findings are often remedied simply by fixing the deficiency going forward. Unless fraud is involved, noncompliance matters are usually remedied through a later decision from a grantor, creditor, or other external stakeholder and may or may not require the return of funds (although this doesn’t happen often). The law, regulation, contract, or grant with which the noncompliance occurred may be subject to varying interpretations and could be considered a non-issue upon review by the stakeholder.

To more clearly explain the matters reported by auditors, standards require certain components to a finding as described below:

  • Identification data – Agency, program, CFDA award number and year.
  • Criteria – What should we have seen?
  • Condition – What did we see?
  • Cause – Why did we see what we saw?
  • Effect – What is the result of what we saw?
  • Questioned costs and how computed – Known costs are reported.
  • Recommendations – How do we avoid seeing it again?
  • View of responsible officials – Auditee provides a response and can reference a Corrective Action Plan, if applicable.

Who’s to blame?

The financial and legal environment in which governments operate is complex and sometimes difficult to navigate. New laws, additional federal funding, complex accounting standards, and a shortage of up-and-coming government finance officers create many challenges for state and local governments. This, and the mere fact that organizations are managed and governed by human beings who are imperfect almost make audit findings the norm rather than the exception There’s no shame in having a finding in your report. Just as with all mistakes, the larger problem occurs when an organization fails to take action to remedy the cause of the finding. If understood in the proper context, a finding can be an opportunity to improve knowledge and processes, thereby allowing an organization to better serve its customers, citizenry, and constituents.

P&N provides audit services for public companies, private businesses, governmental entities, and non-profit organizations. Contact us to learn more.

Scroll to Top