Government auditing is the independent review of how public agencies and recipients of public money handle their finances, run their programs, and follow the law. Independent examiners check whether the books are accurate, whether programs deliver what they promised, and whether spending complied with the rules attached to it. The work is done by different bodies at different levels of government, but the goal is the same: give lawmakers, funders, and the public reliable information about how tax dollars are being used.
Who Performs Government Audits
At the federal level, the Government Accountability Office is the investigative arm of Congress, authorized under 31 U.S.C. Chapter 7 to examine federal spending and evaluate national programs.1Office of the Law Revision Counsel. 31 USC Chapter 7 – Government Accountability Office Most GAO engagements come from requests by congressional committees, subcommittees, or individual members, though GAO can also initiate its own work.2U.S. GAO. Reports and Testimonies Its reports give Congress nonpartisan evidence for oversight hearings, program cuts, and rule changes.
Inside individual federal agencies, Offices of Inspector General act as internal watchdogs. The Inspector General Act of 1978, now codified at 5 U.S.C. Chapter 4, created these offices to root out fraud, waste, and abuse within their home departments.3Office of the Law Revision Counsel. 5 USC Chapter 4 – Inspectors General An OIG reports both to its agency head and to Congress, which gives it a degree of independence that ordinary agency staff lack.
States generally rely on an elected or appointed State Auditor or Auditor General to examine state-funded programs and agencies. Counties and cities use controllers, internal auditors, or independent CPA firms hired to perform annual financial reviews. Together these layers mean that virtually every dollar flowing through the public sector has someone responsible for checking the books.
Types of Government Audits
Financial Audits
Financial audits examine whether an entity’s financial statements accurately reflect its fiscal position. Auditors verify account balances, trace transactions to supporting documents, and confirm that assets bought with public funds actually exist. For entities receiving federal awards, these reviews often fall under the Single Audit Act, codified at 31 U.S.C. Chapter 75.4Office of the Law Revision Counsel. 31 USC Chapter 75 – Requirements for Single Audits
Performance Audits
Performance audits shift the focus from financial accuracy to program results. Instead of asking whether the numbers add up, they ask whether the money accomplished anything useful. A performance audit of a federal job-training program might examine whether participants actually got jobs, how much each placement cost, and whether other agencies duplicated the same work. The findings frequently recommend consolidation, reallocation, or ending programs that don’t produce results.
Compliance Audits
Compliance audits check whether an agency followed the specific laws, regulations, and grant conditions that govern its operations. A review might examine whether a department followed competitive bidding rules on a construction contract, or whether a grant recipient spent funds only on activities the grant agreement authorized. Compliance failures can produce questioned costs and eventual demands for repayment.
What Triggers an Audit
Audits aren’t random. They follow a structured set of triggers:
- Statutory mandates. Any non-federal entity that spends $1,000,000 or more in federal awards during its fiscal year must undergo a single audit under 2 CFR 200.501. That threshold was $750,000 until October 2024, when OMB raised it as part of a broader update to the Uniform Guidance.5eCFR. 2 CFR 200.501 – Audit Requirements
- Congressional requests directing GAO to investigate specific programs, agencies, or spending patterns, often following media coverage or constituent complaints.
- Risk-based selection. For single audits, auditors use a risk-based approach to identify the “major programs” that get detailed testing. Programs with prior findings, large expenditures, or weak oversight history get flagged first.6eCFR. 2 CFR Part 200 Subpart F – Audit Requirements
- Complaints and hotline tips. OIG offices maintain fraud hotlines where employees, contractors, and the public can report suspected waste or abuse. A credible tip can launch an investigation that escalates into a full audit.
- Follow-up on prior findings, to check whether corrective actions actually worked.
No audit office has the resources to examine everything, so auditors concentrate where the probability of material error or noncompliance is highest. Agencies with clean track records may go longer between deep examinations.
The Standards Auditors Work Under
The Comptroller General of the United States issues the Generally Accepted Government Auditing Standards, known as GAGAS or the Yellow Book. These rules apply to all federal audits and are widely adopted for state and local audits as well.7U.S. GAO. Yellow Book: Government Auditing Standards The most recent version is the 2024 revision, which updated the standards around quality management systems.8U.S. Government Accountability Office. Government Auditing Standards 2024 Revision
Independence is the core requirement. GAGAS requires auditors and their organizations to be independent from the entities they examine, and it identifies specific threats to that independence, including financial self-interest, self-review of prior work, bias, familiarity with agency staff, undue external pressure, and management participation. When any threat arises, auditors must apply safeguards that reduce the risk to an acceptable level. GAGAS also imposes continuing education requirements on individual auditors and requires each audit organization to undergo an external peer review at least once every three years. A failed peer review can strip an organization of its ability to conduct GAGAS engagements until the deficiencies are fixed.9U.S. Government Accountability Office. Government Auditing Standards 2024 Revision
How a Government Audit Works
Planning and Entrance Conference
The process starts with a planning phase where auditors study the entity’s operations, prior audit history, and risk profile. An entrance conference formally opens the engagement. Auditors meet with agency management to set the scope, timeline, and ground rules, and management learns which programs and accounts will get the closest look.
Document Gathering
Auditors then request a range of records: general ledgers showing every expenditure and revenue entry, federal grant agreements with their specific restrictions, payroll records showing that compensation matches approved budgets, and contract files with bid documents and award letters proving that vendor selection followed procurement rules. Agencies that keep these materials organized and give auditors read-only access to accounting systems see the process move faster.
Fieldwork and Testing
Fieldwork is where the actual examination happens. Auditors pull samples of transactions and check them against source documents for proper authorization, accurate recording, and compliance with applicable rules. If a sample shows a high error rate, testing expands to see how deep the problem runs. Preliminary observations get communicated to management along the way so that misunderstandings can be cleared up before they harden into formal findings.
Exit Conference and Report
An exit conference previews the results before anything is published. The auditor issues a draft report, and the agency provides a written response, either agreeing with findings and outlining corrective steps or disagreeing and explaining why. The response is included in the final report, which goes to oversight bodies, the audited entity’s leadership, and often the public.
What the Auditor’s Opinion Means
At the end of a financial audit, the auditor issues a formal opinion on the entity’s financial statements. That opinion determines whether oversight bodies, bondholders, and granting agencies trust the numbers. Four outcomes are possible:
- Unmodified, or clean. The financial statements are fairly presented in all material respects. This is what most agencies receive. It does not certify perfection; it means nothing is materially wrong.
- Qualified. The statements are largely reliable, but the auditor identified a material misstatement in a specific area or couldn’t obtain enough evidence on a particular item.
- Adverse. The auditor found material misstatements so widespread that the financial statements do not fairly represent the entity’s position. This signals fundamental problems with financial management or reporting.
- Disclaimer. The auditor could not obtain sufficient evidence to form any opinion, and the gaps were pervasive. This sometimes happens when access to records is restricted.
For federal grant recipients, a qualified, adverse, or disclaimer opinion on a major program can prompt additional scrutiny from the awarding agency and can affect future funding.
Questioned Costs Versus Disallowed Costs
Two terms show up constantly in government audit reports, and confusing them is expensive. A questioned cost is an amount the auditor flags as potentially noncompliant with federal rules, insufficiently documented, or unreasonable.10eCFR. 2 CFR 200.1 – Definitions At this stage the amount is disputed but not yet confirmed as misspent. A disallowed cost is the final determination: the federal agency or pass-through entity has reviewed the finding and concluded the expenditure was genuinely unallowable. Once costs are disallowed, the entity typically must repay them. Some questioned costs are resolved with better documentation; others result in repayment demands running into the millions.
What Happens After the Report
A published audit report is the start of a corrective cycle, not the end. OMB Circular A-50 requires federal agencies to issue a written management decision on all audit findings within 180 days after the final report.11The White House. Revised Circular A-50 Agreement must include a corrective action plan with specific steps and target dates. Disagreement must explain the reasoning, including the legal basis if the dispute involves interpretation of law or regulation.
When findings identify disallowed costs, the awarding agency must establish accounting and collection controls and pursue repayment under the Federal Claims Collection Standards.12U.S. Government Accountability Office. Statement Concerning Federal Departments and Agencies Failure to Collect Audit-Related Debts Primary grant recipients are responsible for repaying funds their subrecipients misspent, a detail that surprises many organizations managing pass-through grants. Follow-up continues until the auditor or oversight body verifies that corrective actions have resolved the original problems. For entities with recurring findings across multiple audit cycles, consequences escalate: federal agencies can impose special conditions on future awards, require more frequent reporting, or suspend funding.
Where to Find Audit Reports
Government audit reports are public documents. At the federal level, Oversight.gov is a central repository where Inspector General reports across dozens of agencies can be searched and downloaded.13Oversight.gov. Oversight.gov GAO publishes its own reports on gao.gov, and individual OIG offices maintain their own report libraries. State and local reports are typically posted on the auditor’s official website or a state transparency portal. That accessibility is what gives the system its force: findings don’t stay buried, and they become part of budget hearings, funding decisions, and public accountability long after the fieldwork is done.