Types of Audit Reports
The report process begins after the exit conference. It involves issuing three reports: a draft report, a preliminary report, and a final report.
Draft Audit Report
The draft audit report is developed from the exit conference. The Chief Audit Executive (CAE) reviews the report and provides input. The draft report is sent to the auditee for their review and comments as to the accuracy and clarity of the report as well as the reasonableness of the recommendations. The content will be largely unchanged from the exit conference so there should not be any surprises to the auditee. A deadline of 10 business days is given for submitting responses to the draft report to the CAE.
The CAE or the lead auditor will resolve comments that are received and integrate them with the audit report as applicable.
Preliminary Audit Report
The preliminary audit report consists of the draft audit report after all comments have been resolved. It is issued through the chief financial officer to the chancellor as a confidential document. The chancellor will have five weeks to provide a formal response to the recommendations in the report. The formal response should include a plan of action for each recommendation and expected date of completion for each action plan. It will be reviewed by the chief financial officer and the CAE.
Final Audit Report
Upon approval of the chancellor’s response to the preliminary audit report, the final report is prepared. This document is simply a combination of the preliminary audit report and the chancellor’s response into one document. The final audit report is distributed to the Board of Regents Audit Committee and discussed at their next regularly scheduled meeting.
Audit recommendations remain open until they are followed up and determined to have actions plans implemented. See Follow-up Auditing for the process used to close out open audit recommendations.