How to Conduct an Audit

A nerve-wracking visit from the IRS isn’t the only type of audit out there. There are several audits you can—and should—conduct regularly. And to do that, you need to know how to conduct an audit.

Read on to learn:

What is an audit?

First things first: What is an audit, exactly? An audit analyzes a business’s financial records to verify accuracy and completeness. The person auditing your business generally reviews your transactions systematically by comparing your financial statements to books. 

So, who should be the one doing the audit? Take a look at the following parties who might audit your business:

You probably don’t want the IRS to regularly audit your business. Ideally, you’d love for them to never audit your business. But if you think this way about all audits, you could be missing out—and opening the door to potential IRS audits.

Regular audits (e.g., once per year by you or a CPA) can help you get your books in order, which can help you prevent and prepare for potential IRS audits.

An internal audit can help you catch common accounting mistakes.

Want to learn about common accounting mistakes, like data entry errors, errors of omission, and failing to use a budget? Download our FREE guide to learn about 10 common accounting mistakes, how to avoid them, and what to do if you’ve already made a mistake.

The types of audits

Because different parties can audit a business, several types of audits can occur. Nine different types of audit include:

1. Internal audit: Someone in your business may conduct an audit to monitor process effectiveness, make sure you comply with laws, and evaluate risk management.
2. External audit: An accountant or other third party may audit your business for reporting accuracy. The auditor follows generally accepted auditing standards (GAAS).
3. IRS tax audit: The IRS audits your business to assess the accuracy of your business tax returns.
4. Financial audit: Generally, an external auditor analyzes your business’s financial statements for accuracy and releases an audit opinion to lenders, creditors, and investors.
5. Operational audit: Like in internal audits, this audit analyzes a business’s operations, goals, and results to look for areas of improvement. 
6. Compliance audit: An auditor examines your business’s policies and procedures to ensure they’re compliant (e.g., workers’ compensation compliance).
7. Information system audit: Software and IT companies may undergo an information system audit to ensure software development, data processing, and computer systems are running smoothly.
8. Payroll audit: An auditor (typically internal) analyzes your company’s payroll process to make sure there are no errors in your payroll process, like miscalculations. 
9. Pay audit: Not to be confused with payroll audit, a pay audit helps you identify pay discrepancies among employees. 

Some of the types of audits are internal, external, or both. The ones that you can do internally (e.g., internal audit, pay audit, etc.) are the ones you should know how to conduct. Of course, you can learn what happens when you get audited by the IRS for your own knowledge, too! But for the purpose of this article, we’ll stick to how you can conduct internal audits—and why performing them is important. 

Why performing an audit is important

Sure, conducting an audit can seem overwhelming. After all, it can be a lengthy process (sometimes lasting up to several months). 

But, regular audits are key to a healthy business. So before diving into the internal audit process, let’s review why you should conduct one. 

Conducting an audit can help you:

• Check for accuracy in your business finances or processes 
• Find errors in your books, processes, payroll, or pay rates
• Prevent IRS audits by helping you avoid incorrect reporting on tax returns 
• Implement new accounting or business processes
• Make more informed business decisions based on accurate information
• Ensure your business is compliant (e.g., payroll tax rules)

And, here’s another bit of good news: The more organized your business is and the more audits you conduct, the less time each may take.  

How to conduct an audit 

Want to reap the benefits of auditing your business? Take a look at the following basic internal audit process steps below.

1. Begin planning the audit

Like anything in business, efficient audits require planning. So, your first step toward internal audits is planning the process. 

You should decide:

• What areas you need to audit
• Who will be conducting the audit
• How frequently to audit
• When the audit will begin and end

Let’s say you want to conduct a payroll audit. To do this, you need to analyze your payroll records, including gross pay rates, tax withholdings, and net pay. You appoint your HR manager as the person conducting the audit. And, you decide that you’ll do payroll audits annually. You plan on the audit lasting two weeks. 

Pro tip: Jot down every activity related to the area you plan to audit. That way, you don’t miss part of the process. And, create an audit schedule that lays out each step of the audit process. 

2. Notify your employees 

Unless you’re doing a surprise audit (i.e., you think there’s suspicious activity afoot), you should notify employees that you plan to conduct an audit.

After you plan and schedule your audit, you should:

• Alert employees involved in the audit 
• Ask all departments to get you any documents and info you need for the audit
• Add your audit schedule to a company-wide calendar
• Share your audit schedule directly with relevant parties 

Give your team ample time to gather necessary documents and continue their regular daily tasks.

3. Conduct the audit

Your next step in learning how to audit is the audit itself. That’s right—it’s time to conduct the audit. 

When conducting an audit, be sure to:

• Gather documents from employees
• Review business processes
• Interview employees to learn more about their skill levels 

Take your time during the audit. You may even consider shadowing an employee or department to learn more about their work.

4. Document and report your findings 

Throughout the audit, take plenty of notes. Record what you see, and annotate whether your business and employees follow proper procedures. 

Create an auditor’s report to document your findings. Under the generally accepted auditing standards (GAAS), the report should include the:

1. Responsibilities of the auditor and directors
2. Scope of the audit
3. Auditor’s opinion

The more details you document, the more you’ll understand what works and what doesn’t in your business. That way, you can refer back to your supporting documents and connect the dots.

After creating your audit report, share it with any applicable parties, such as a business partner, investors, or upper management. 

Heads up! The AICPA Auditing Standards Board made major changes to the auditor’s report in 2021. One key change requires the auditor to put their opinion at the beginning of the report.  

5. Make changes 

Last but not least, use your audit results. Don’t leave them to sit on a shelf collecting dust. So, determine what changes you can make to improve your audit findings.

For example, you may need to take one or more of the following actions:

• Provide additional training to employees 
• Change a business process to be more compliant
• Update your books and financial statements 
• Tweak business policies and procedures 

Let’s say you conduct a financial audit and realize your financial statements are incorrect. In addition to correcting the issues (e.g., recording missed journal entries), you might also begin using accounting software for better recordkeeping. 

Looking for accounting software that makes it easy to keep records … without sucking up all of your time? Try Patriot’s online accounting! We created our software with the input of business owners and accountants to make managing your books fast, easy, and affordable. Get your free trial today! 

This is not intended as legal advice; for more information, please click here.