A performance audit is an independent review that examines whether a government program or organization is achieving the results it was created to produce and whether it is using public money sensibly along the way. It looks past the accounting ledger and asks harder questions: Is the program working? Are people getting what the law promised them? Is the cost reasonable for what taxpayers are getting back? The Government Accountability Office, federal and state inspectors general, and state audit agencies conduct these reviews under professional standards, and their reports become public records that legislators rely on when they set budgets and rewrite policy.
How It Differs From a Financial Audit
The two audit types answer different questions. A financial audit asks whether the numbers are right. A performance audit asks whether the program is working. Financial auditors verify that transactions were recorded correctly and that the statements follow accounting rules. Performance auditors look at outcomes, operations, and whether the dollars produced the results legislators intended.
Take a workforce training agency with a $10 million budget. A financial audit confirms the agency spent that money in line with appropriations law. A performance audit asks how many people completed the training, how many found jobs afterward, and whether the cost per participant was reasonable compared to similar programs. Both audits follow standards issued by the GAO, but the scope, methods, and reporting requirements differ substantially.
What a Performance Audit Measures
Performance auditors evaluate programs against three core measures: economy, efficiency, and effectiveness.
Economy
Economy looks at whether the organization acquired its staff, supplies, and other resources at the lowest reasonable cost for the quality needed. An auditor reviewing a county health department’s supply purchases would compare prices paid against market rates and check whether procurement followed competitive bidding rules.
Efficiency
Efficiency measures output per dollar spent. Two agencies running identical programs might spend the same amount and serve very different numbers of people. The auditor traces the gap to its causes, which can include redundant processes, outdated technology, or staff assigned to the wrong tasks.
Effectiveness
Effectiveness is the hardest question: did the program accomplish what it was supposed to? Answering it requires measuring actual outcomes against the goals set when the program launched. The Government Performance and Results Act requires federal agencies to establish measurable performance goals and report progress against them, which gives auditors a built-in benchmark.1The White House. Government Performance Results Act of 1993 Agencies must produce annual performance plans with quantifiable targets, and auditors use those targets as the yardstick.2Administrative Conference of the United States. Government Performance and Results Act
Who Can Be Audited
Federal agencies are the most visible subjects, but the reach is much wider. Any organization that receives federal funding can be audited under the federal Uniform Guidance. That covers state and local governments, tribal organizations, universities, and nonprofits that receive federal grants or awards. When an entity fails to complete a required audit or refuses to address findings, the federal awarding agency can withhold further funding or take other action under the grant agreement.3eCFR. 2 CFR 200.505 – Remedies for Noncompliance
State legislatures and city councils also commission performance audits of their own agencies. A legislature might request one after constituent complaints pile up, after a budget shortfall raises questions, or on a routine cycle. Large agencies sometimes run internal performance reviews as well, though external audits carry more weight with lawmakers and the public because the reviewer sits outside the chain of command.
The Standards Behind the Work
The GAO publishes the Government Auditing Standards, commonly called the Yellow Book, which sets the rules for how government audits are planned, conducted, and reported.4U.S. GAO. Yellow Book: Government Auditing Standards The most recent revision took effect in December 2025 for performance audits.5U.S. Government Accountability Office. Government Auditing Standards 2024 Revision The standards require auditors to be independent from the organizations they audit, both in fact and in appearance. Someone who previously worked for the program under review would face a conflict of interest serious enough to disqualify the whole engagement.
The 2024 revision replaced earlier quality control requirements with a more structured system of quality management, engagement quality reviews, and peer review.5U.S. Government Accountability Office. Government Auditing Standards 2024 Revision Audit organizations undergo external peer reviews to verify their work meets Yellow Book standards. Peer reviewers examine completed audits, interview staff, and issue a rating. A failed peer review calls into question every audit the organization has issued since its last passing review, which is why audit shops take the process seriously.
How the Audit Unfolds
A performance audit does not begin with auditors arriving at your office. It starts months earlier with planning. Auditors read the program’s authorizing legislation, prior audit reports, budget documents, and organizational charts to build a picture of how the program is supposed to work and where it might be falling short. Risk assessment drives the choices about scope and depth. A large program with a history of unresolved findings gets a more intensive audit than a small, well-run operation with a clean record. Auditors weigh inherent risk, meaning how likely things are to go wrong just because of the nature of the program, alongside control risk, meaning the chance that internal checks will miss a problem.
Once the scope is set, the team sends a document request. Auditors ask for the materials that define how the program runs: mission statements, policy manuals, organizational charts, job descriptions, and budget records across multiple fiscal years. Internal control questionnaires are common too, requiring management to answer detailed questions about finances, procurement, and oversight.
Then comes fieldwork. Site visits, direct observation, and interviews at every level of the organization. Conversations with frontline employees often reveal practical realities that never make it into official reports. An auditor talking with case workers at a benefits office might learn that a software system crashes so often that staff revert to paper tracking, creating a data integrity problem invisible in the budget documents. Fieldwork can run weeks or months. Throughout, auditors build preliminary findings by comparing what they observe against the criteria set during planning. Each finding follows a set structure: what should be happening, what is actually happening, why the gap exists, and what harm or risk the gap creates.
The Report and the Agency’s Response
The final report is the public product of the entire process. Yellow Book standards require the report to state that the audit was conducted in accordance with generally accepted government auditing standards and to describe the scope and objectives.6Government Accountability Office. Government Auditing Standards 2024 Revision Each finding is laid out with supporting evidence, followed by recommendations. Those recommendations might call for changes to internal policy, reallocation of staff, technology upgrades, or requests for legislative action on funding.
Before the report goes public, auditors must give the audited organization a chance to review the draft and respond in writing.6Government Accountability Office. Government Auditing Standards 2024 Revision The written response, often called a management comment, is published alongside the final report. Agencies use it to agree with findings and describe their corrective plans, or to push back and explain why they believe the auditors got something wrong. Experienced readers pay attention to that response, because an agency that disputes every finding is sending a different signal than one that accepts them and outlines a concrete fix.
What Happens After the Report
A performance audit report with no follow-up is just an expensive document. The value comes from what happens next. Organizations are expected to develop corrective action plans that identify specific steps, who is responsible for each step, and when the work will be finished. The best plans also describe how the organization will verify that the fix actually worked rather than just checking a box.
For federal grant recipients, ignoring findings has real consequences. Under the Uniform Guidance, a federal awarding agency can withhold funds, suspend or terminate a grant, or take other enforcement action when an entity fails to complete required audits or address reported deficiencies.3eCFR. 2 CFR 200.505 – Remedies for Noncompliance At the state and local level, legislatures may tie future appropriations to the resolution of audit findings, forcing agencies to fix problems or lose money.
Audit organizations typically track open recommendations and publish periodic follow-up reports showing which findings have been resolved and which remain outstanding. The GAO maintains a database of open recommendations to federal agencies and regularly testifies before Congress about recommendations agencies have left sitting for years. That ongoing pressure is what turns a performance audit from a one-time exercise into a mechanism of accountability.