What to Expect During an Audit

When your area is audited, you should expect the following as we plan, conduct, and report results during an audit:

• Planning may include, but not limited to, the following:
  • Discussion and document of key processes to identify risks and existing controls;
  • Reconciliation of identified risks and controls;
  • Designing a test plan to test existing controls; and, 
  • Identifying any unmitigated risks.

• Testing includes, but not limited to:
  • Execution of the designed test plan;
  • Developing controls for unmitigated risks; and,
  • Identifying potential process improvements.

• Reporting includes, but is not limited to, the following:
  • Periodic updates of testing results;
  • Preparation of a draft report for review and input; and,
  • A management action plan as a part of the final report.

Input is solicited and encouraged during every phase of the audit process.