Stages of a Financial Statement Audit
For business owners, nonprofit executives, and government finance officers, an audit can feel like an intrusion. Staff are pulled away from daily responsibilities. Documents are requested repeatedly. Questions arise about transactions that occurred months or years ago. The process can be disruptive if it is not managed well.
But an audit is not an adversarial exercise. It is a structured professional engagement designed to provide independent assurance that financial statements are presented fairly. When clients understand what happens at each stage—and what is expected of them—the process becomes smoother, faster, and more valuable.
This guide walks through the four stages of a typical audit engagement: planning, fieldwork, reporting, and follow-up. It explains what auditors do at each stage, what clients should prepare, and how to minimize disruption while maximizing the value of the engagement.
The Purpose of an Audit
Before examining the stages, it helps to understand what an audit is designed to accomplish. A financial statement audit provides reasonable assurance that the financial statements are free from material misstatement, whether due to error or fraud. The auditor issues an opinion on whether the statements are presented fairly in accordance with the applicable financial reporting framework, typically Generally Accepted Accounting Principles (GAAP).
Reasonable assurance is a high level of assurance, but it is not absolute. Auditors do not examine every transaction. They use risk assessment, sampling, and professional judgment to focus effort where misstatement is most likely. This is why audits are not guarantees—and why strong internal controls remain essential regardless of the audit opinion.
Stage One: Planning
Planning is the foundation of an effective audit. Done well, it reduces the risk of surprises later, focuses fieldwork on the areas that matter most, and ensures that both auditor and client understand the scope and timeline.
Defining Scope and Objective
Each audit begins with a clear definition of what is being audited and why. For a financial statement audit, the scope is typically the entity’s financial statements for a defined period. The objective is the expression of an opinion. For a Single Audit, the scope expands to include compliance with federal award requirements and internal controls over compliance.
During this phase, the auditor considers the entity’s industry, regulatory environment, organizational structure, prior audit findings, and any significant changes in operations or accounting policies. The auditor also assesses risk—identifying areas where misstatement is most likely and designing procedures to address those risks.
The Entrance Meeting
Internal audit functions typically conduct an entrance meeting with management to discuss the purpose of the audit, risk factors, and logistics. Management is included in the planning phase, and the details are documented in a planning and scoping memo. Depending on the organization, the entrance meeting may include a single email notification, a formal in-person meeting, or both.
For external audits of small and mid-sized organizations, the planning phase may be less formal but still involves communication with management about timing, staffing, and information needs. The auditor will provide a Prepared by Client (PBC) list—a document listing the records and schedules the client needs to prepare. Getting this list early, and working through it systematically, is one of the most effective ways to shorten the audit timeline.
Scheduling and Coordination
An audit diverts time from normal operations. Treating it like any other special project—allocating staff time, setting internal deadlines, and designating a point of contact—minimizes disruption. The auditor should coordinate with management to schedule fieldwork during a period when key personnel are available and when the necessary records are complete.
Consideration of Legal or Governance Requirements
In some engagements, particularly those involving regulated entities or complex transactions, the auditor may need to consider whether engagement by legal counsel is required. This is more common in internal audit settings or engagements involving potential litigation, regulatory inquiry, or significant contractual obligations. The planning phase is the appropriate time to identify and address these considerations.
Documentation and Approval
Audit planning should be documented. The planning memo typically records the audit’s objective, scope, methodology, timeline, staffing, and identified risks. In internal audit environments, director or Chief Audit Executive approval may be required before fieldwork begins. For external audits, the engagement letter serves a similar function, defining the terms of the engagement and the responsibilities of both parties.
Stage Two: Fieldwork
Fieldwork is where the audit plan is executed. It is typically the most time-intensive phase and the one that requires the most involvement from client staff.
What Auditors Do During Fieldwork
During fieldwork, auditors conduct the steps identified in the planning process. These steps often include:
Interviews with management and staff to understand processes, controls, and significant transactions
Review of laws, policies, and best practices applicable to the entity’s operations
Verification of sample transactions to test whether transactions are properly authorized, recorded, and supported
Analysis of data sets to identify anomalies, trends, or unusual relationships
Surveys where appropriate to gather information from a broader group
Auditors meet regularly with management throughout fieldwork to discuss the status of the audit, preliminary observations, and potential recommendations. This ongoing communication is important. Issues raised early can often be resolved before they become formal findings. Waiting until the exit meeting to raise concerns benefits no one.
What Clients Should Expect
Clients should expect requests for documentation, access to systems and personnel, and questions about transactions and processes. The volume of requests can feel overwhelming, particularly for first-time audits or audits of organizations with decentralized operations.
Practical steps to manage fieldwork effectively:
Designate a primary point of contact who can coordinate document requests and schedule interviews
Set internal deadlines for producing requested documents, working backward from the auditor’s fieldwork schedule
Organize records in advance by pulling supporting documentation for significant transactions and account balances
Be responsive to questions — delays in responding to auditor inquiries extend the timeline for everyone
Keep lines of communication open — if you disagree with a preliminary observation, raise it during fieldwork, not after the report is drafted
Fieldwork in Single Audits
For organizations subject to Single Audit, fieldwork includes additional procedures. The auditor tests internal controls over compliance for major federal programs and performs compliance testing for requirements such as allowable costs, eligibility, procurement, cash management, reporting, and subrecipient monitoring. The Schedule of Expenditures of Federal Awards (SEFA) is reviewed to confirm that federal awards are properly identified and major programs correctly determined.
Stage Three: Reporting
Reporting is where the auditor communicates the results of the engagement. This includes both verbal communication and written reports.
The Exit Meeting
At the conclusion of fieldwork, auditors conduct an exit meeting with management to discuss the results of the audit, specific findings and recommendations, and other observations. This meeting provides an opportunity for management to hear the findings directly, ask questions, and begin formulating responses.
The Audit Observation Memo
Auditors communicate findings to management through an audit observation memo or similar document. Each observation typically describes the condition identified, the criteria (the standard that should have been met), the cause, the effect or risk, and the recommendation. Management is asked to provide a response with a corrective action plan and timeline for implementation.
Management Responses
Management responses are a critical part of the reporting process. They demonstrate that leadership has considered the findings and is committed to addressing them. A well-crafted response includes:
Concurrence or non-concurrence with the finding
Corrective action — what will be done to address the issue
Responsible party — who will implement the action
Implementation date — when the action will be completed
Vague responses such as “we will review the process” or “management will consider improvements” do not satisfy auditors or oversight bodies. Specific, time-bound commitments do.
Draft Report Review
Management and leadership are provided an opportunity to review drafts and provide feedback before the final report is issued. This review is not a negotiation of findings, but it is an opportunity to correct factual errors, clarify language, and ensure that the report accurately reflects the organization’s circumstances.
The Final Report
The final report includes the audit opinion (for financial statement audits), the observations and management responses, and any required communications. For Single Audits, the report also includes the Schedule of Findings and Questioned Costs, the SEFA, and the report on internal controls over compliance.
Stage Four: Follow-Up
Not every audit includes a formal follow-up stage, but for internal audits and many compliance engagements, follow-up is essential. Follow-up verifies that management has implemented the corrective actions committed to in their response. Without follow-up, findings recur year after year, and the audit process becomes circular rather than corrective.
For external financial statement audits, follow-up typically takes the form of reviewing the prior year’s findings during the next planning phase. If a finding from the prior year has not been addressed, the auditor may raise it again or assess whether the unresolved issue affects the current year’s audit approach.
Managing an Audit Successfully
The most successful audits share several characteristics:
Preparation — Records are organized, schedules are prepared, and staff understand what to expect.
Communication — The client and auditor maintain open, regular communication throughout the engagement.
Engagement — Management takes the audit seriously, allocates appropriate time, and responds to requests promptly.
Follow-through — Findings are addressed, and corrective actions are implemented as committed.
Treating the audit as a partnership rather than an inspection produces better outcomes for everyone. The auditor gains the information needed to complete the engagement efficiently. The client gains assurance that financial reporting is accurate and controls are effective. And the organization gains credibility with lenders, donors, boards, and regulators.
How Nova Tax & Accounting Services Can Help
At Nova Tax & Accounting Services, we conduct financial statement audits, reviews, and compilations for businesses, nonprofits, and government entities across Northern Virginia and Washington DC. Our approach emphasizes clear communication, efficient fieldwork, and practical recommendations that strengthen internal controls.
We also provide Single Audit services under the Uniform Guidance for organizations expending $1 million or more in federal awards.
For more information, visit https://novataxservices.com/audit-attestation-services/ or schedule a free consultation.
