What happens after a government audit: the stages from report to outcome

The rules behind the process

Most national audit offices, called supreme audit institutions (SAIs), work to standards set by the International Organisation of Supreme Audit Institutions (INTOSAI). ISSAI 100 sets the basic principles for all public sector audits and was given editorial changes in 2019 when INTOSAI set up its Framework of Professional Pronouncements ¹. ISSAI 300 covers performance audits and ISSAI 400 covers compliance audits ^2,3. The Mexico Declaration on SAI independence, now INTOSAI-P 10, sets out how reports should be handled once issued ⁴.

ISSAI 100 says the purpose of an audit report is to tell stakeholders, those responsible for governance and the public what the audit found, and to make corrective action and later checks possible ¹.

Stage 1: the management response

Before a report is final, the audited body sees the findings. ISSAI 300 says audited entities 'should be given an opportunity to comment on the audit findings, conclusions and recommendations before the SAI issues its audit report', that disagreements should be analysed and factual errors corrected, and that the auditor should record why the draft was or was not changed ².

Many reports print the response next to each finding, with the action promised, the officer responsible and a target date. Check whether the body accepted or rejected each point, and whether the auditor accepted the reply ².

Stage 2: parliament and the public accounts committee

INTOSAI-P 10 says SAIs submit their reports to the legislature, one of its committees or the audited body's board, which reviews them and acts on specific recommendations for corrective action ⁴.

In the UK, the House of Commons Committee of Public Accounts examines public spending and value for money, not the merits of policy. It bases most inquiries on National Audit Office reports and takes evidence from accounting officers, usually permanent secretaries, who answer directly to parliament ⁵. Government departments reply to the committee's reports through a Treasury Minute, published on GOV.UK ^5,6.

Kenya writes a deadline into its constitution. Audit reports go to Parliament or the relevant county assembly, which must 'debate and consider the report and take appropriate action' within three months of receiving it ⁷.

Stage 3: tracking recommendations

INTOSAI-P 10 says SAIs keep their own internal system to check that audited bodies act on recommendations, both their own and those of the legislature. SAIs report the results back to the legislature, even where they have their own powers of follow up and sanction ⁴.

In the UK the government publishes Treasury Minutes in batches through the year. The GOV.UK collection lists releases since 2010, with batches added in 2026 up to August ⁶. A reader can match each committee recommendation with the government reply, which accepts, rejects or partly accepts it.

Stage 4: follow-up audits

ISSAI 300 says auditors 'should follow up previous audit findings and recommendations wherever appropriate' and report back to the legislature. It says the check is not limited to whether recommendations were carried out, and looks at whether the underlying problems were fixed ².

ISSAI 400 says compliance auditors should follow up cases where rules were broken when appropriate, and that in regular audits the check may form part of the next year's risk assessment ³. ISSAI 100 says weak or unsatisfactory action by the audited body may call for a further report ¹.

Stage 5: referral to prosecutors or anti-corruption bodies

Auditors must assess the risk of fraud relevant to the audit ¹. ISSAI 400 says some SAIs 'are mandated to refer facts liable to criminal prosecution to the judicial authorities' ³. Where an audit office has no such duty, a referral usually depends on parliament, the government or the prosecutor acting on the published report. Case pages on this site record any referral, the body that received it and what became of it.

Stage 6: recovery of public money

Some systems make officials pay. Article 226 of the Constitution of Kenya says a public office holder who directs or approves the use of public funds contrary to law or instructions 'is liable for any loss arising from that use and shall make good the loss, whether the person remains the holder of the office or not' ⁷.

ISSAI 400 notes that some SAIs, such as courts of accounts, have power to pronounce judgments and sanctions on those who manage public funds ³.

Stage 7: court challenges

In SAIs with a judicial role, the later stages can themselves be legally binding reports or judicial decisions ^1,3. Elsewhere, audited bodies, officials or contractors can contest findings or recovery demands in the ordinary courts or in arbitration, and a court can uphold, narrow or set aside the action that followed an audit. Audit Outcomes treats each ruling as a stage of the case, including findings later disputed or overturned.

How to check the stage a case has reached

Start with the report and its printed management responses. Then look for the committee hearing and report, the government reply, any follow-up audit, and any court or prosecutor record. If a stage has no public record, that gap is itself worth noting with a date.