A financial audit usually takes anywhere from two weeks to more than a year. A focused internal review at a small business can wrap in two to four weeks. An external audit of a mid-sized private company generally runs four to eight weeks, and complex engagements stretch to 10 or 12. An IRS examination can close in a few months if it’s a correspondence audit, or run close to the agency’s internal 26- to 27-month processing window if it’s a field audit with disagreements. How long does a financial audit take in your case depends mostly on which type you’re facing, how complex your organization is, and how quickly documents and answers move between you and the auditor.
What Drives the Timeline
Size and complexity set the outer bounds. A company with multiple subsidiaries, international operations, or diverse revenue streams takes far longer to examine than a single-location business with straightforward books. Regulated industries such as banking, healthcare, and government contracting draw more scrutiny, which adds time.
Transaction volume matters because auditors test samples pulled from your records. More transactions mean a larger sampling pool and more verification. Strong internal controls (separation of duties, automated reconciliations, regular supervisory review) shorten this phase, because the auditor can rely on your systems instead of testing everything independently. Weak controls force more hands-on work.
Responsiveness is the factor people underestimate. The IRS notes that audit length depends on “the availability of information requested” and “the availability of both parties for scheduling meetings.”1Internal Revenue Service. IRS Audits The same holds for private-sector audits. Slow document turnaround or unanswered clarification questions push everything back.
Typical Timelines by Audit Type
The word “audit” covers several different processes, and the type you’re in is the most reliable predictor of duration.
Internal Audits
An internal audit is run by a company’s own team, or an outsourced team acting on its behalf, to evaluate specific processes, controls, or risk areas. Scope is narrower than an external audit. A small business review typically takes two to four weeks. Larger organizations with formal internal audit departments often schedule three-month cycles that include planning, fieldwork, and reporting across multiple projects.
External Audits for Private Companies
An independent firm performs an external audit to verify that your financial statements are fairly presented. For a mid-sized private company, expect roughly four to eight weeks from kickoff to final report. Complex organizations with high transaction volumes, multiple entities, or significant estimates such as loan loss reserves or inventory valuations may need 10 to 12 weeks or more. Busy season (January through April) tightens auditor schedules and can push timelines out further.
Public Company Audits
Public companies face hard SEC filing deadlines. Large accelerated filers (public float of $700 million or more) must file the audited annual report within 60 days of fiscal year-end. Accelerated filers get 75 days. Other filers get 90 days. To meet those windows, most public company audits spread substantial interim work across the year rather than compressing everything into one final push.
IRS Tax Audits
The IRS runs audits by mail or through in-person interviews at an IRS office, your home, your business, or your representative’s office.1Internal Revenue Service. IRS Audits Three formats exist, each with a different scope:
- Correspondence audit: the IRS mails a letter requesting documentation for specific items on your return, such as income, expenses, or itemized deductions. Prompt, well-organized responses can resolve these in a few months.
- Office audit: you meet with an IRS examiner at a local IRS office. Scope is broader than a correspondence audit and usually covers multiple issues on the return.
- Field audit: an agent visits your home, business, or accountant’s office to review records on site. These are the most comprehensive and are reserved for more complex returns.
Behind those formats sits the IRS’s internal 26/27 month examination cycle. Individual returns are supposed to be audited and fully processed within 26 months of the due date or filing date, whichever is later; business returns get 27 months.2Internal Revenue Service. IRM 4.10.2 Pre-Contact Responsibilities That window covers the examination itself plus appeals, assessment, and the closing letter. Many audits finish well inside it. Complex cases or unresolved disagreements push toward the outer edge or beyond.
The Three Phases and Where Time Gets Lost
Whether you’re facing an external financial statement audit or a government examination, the process moves through planning, fieldwork, and reporting.
Planning
The auditor opens with a meeting to define scope, objectives, and timeline. During this phase the team reviews your organizational structure, identifies higher-risk areas, and builds a testing plan. They also set materiality thresholds, meaning the dollar amount above which an error becomes significant enough to affect a user’s decisions. For most profit-driven businesses, auditors base that threshold on a percentage of pre-tax income. Asset-based or revenue-based benchmarks are common for nonprofits, investment funds, and startups without meaningful profits yet.
Fieldwork and Substantive Testing
Fieldwork is where most of the audit happens, and where most of the delay lives. The auditor tests account balances and transactions against underlying source documents: invoices, contracts, bank records, payroll files. Two types of testing dominate.
- Internal verification: the auditor examines your records directly, recalculating figures, tracing transactions from journal entries to supporting documents, and testing whether your controls operated effectively during the period.
- External confirmation: the auditor contacts third parties such as banks, customers, vendors, and lenders to verify balances independently. Under auditing standards, confirmations must go directly to the third party, and the response must come back directly to the auditor, bypassing your organization entirely. That makes confirmations reliable but slow, since the timeline depends on outside parties.3PCAOB. AS 2310 – The Auditors Use of Confirmation
Missing documents, unresponsive staff, unexpected discrepancies that trigger additional testing, and slow confirmation responses are the usual reasons fieldwork runs long.
Review and Reporting
Once fieldwork wraps, the auditor compiles findings and moves into review. An exit conference (sometimes called a closing conference) lets you discuss issues, proposed adjustments, and recommended control improvements before the report is finalized. The engagement ends with the delivery of the final audit report and the auditor’s opinion on whether the financial statements are fairly presented.
How to Shorten Your Audit
The fastest way to compress an audit is to have documents ready before the auditor arrives. Most firms send a request list (often called a “prepared by client” or PBC list) weeks ahead of fieldwork. Contents vary, but the core is consistent:
- General ledger and trial balance for the period under review.
- Bank statements from every institutional account, along with monthly reconciliations tying the bank balance to the books.
- Payroll records, including summaries by pay period, tax withholding reports, and year-end forms such as W-2s.
- Federal and state tax filings for the period, plus any correspondence with taxing authorities.
- Contracts and agreements: leases, loan documents, vendor contracts, and customer agreements that affect revenue recognition or liability balances.
Most of this can be exported from accounting software or downloaded from banking portals. A centralized digital folder with file names that match the auditor’s request list prevents the back-and-forth that eats days.
If you’re in an IRS audit and the examiner needs official return records, two IRS forms come into play. Form 4506 requests a full copy of a previously filed return.4Internal Revenue Service. About Form 4506, Request for Copy of Tax Return Form 4506-T requests a transcript, a shorter summary of the key line items.5Internal Revenue Service. About Form 4506-T, Request for Transcript of Tax Return Transcripts are generally free and arrive faster, which is why they’re the common choice during audits.
What Happens After the Audit Closes
The audit’s own timeline is only part of the story if the IRS proposes changes you disagree with. The IRS issues a 30-day letter explaining the proposed adjustments, and you generally have 30 days from the date on the letter to request a conference with the IRS Independent Office of Appeals.6Taxpayer Advocate Service. Letter 525 Audit Report – 30 Days to Respond Miss that deadline and you can receive a statutory notice of deficiency (the 90-day letter), which narrows your remaining path to a petition in Tax Court.7Internal Revenue Service. Taxpayer Bill of Rights Appeals and litigation extend the total time from examination notice to final resolution well beyond the fieldwork window, and are a large part of why the IRS builds a 26- to 27-month cycle around the process in the first place.