There are 3 steps in the audit process:
(1) Planning – Audit staff assess risk, identify sources of evidence, determines audit objectives, scope, procedures, and develops an audit plan.
(2) Fieldwork – Auditors must obtain sufficient, appropriate evidence to provide a reasonable basis for findings and conclusions. To meet the standards of evidence, the fieldwork phase may include conducting interviews, testing controls, examining documents, evaluating systems, and performing observations at department work sites. Evidence obtained is documented in workpapers to support audit findings and conclusions.
(3) Reporting – Audit reports communicate the results of each completed audit to those charged with governance. Audit findings are communicated to management with a request to implement the audit recommendations. A follow-up audit may be performed at a later date to determine if management has complied with the report recommendations.