32.1 Performance Audit Fieldwork, Reporting & Auditee Responsibilities

16.3 Performance Audit Fieldwork, Reporting & Auditee Responsibilities

The Framework of GAGAS Performance Auditing

Under Chapters 8 and 9 of the Yellow Book (GAGAS), a performance audit is an objective, systematic examination of evidence to provide an independent assessment of the performance and management of a government program, activity, or entity against objective criteria. Rather than expressing an opinion on historical financial statements, performance auditors evaluate whether government programs achieve intended results, operate efficiently and economically, comply with statutory authorities, and safeguard public resources.

The Core Planning Trinity: Objectives, Scope, and Methodology

Every performance audit rests on three interrelated planning parameters defined during the survey phase:

1. Audit Objectives: The specific questions the audit seeks to answer about program performance, results, economy, efficiency, or compliance. Objectives determine the entire orientation of the engagement (e.g., "Did the state child care subsidy program verify recipient eligibility prior to disbursing benefits during FY 2026?").
2. Audit Scope: The defined boundary of the audit, specifying the time frame examined (e.g., October 1, 2024 through September 30, 2026), the specific organizational units or programs included, the geographic regions visited, and any programmatic segments intentionally excluded.
3. Audit Methodology: The detailed audit procedures, data gathering techniques, sampling strategies, and analytical methodologies designed to collect sufficient, appropriate evidence to satisfy each audit objective.

+-----------------------------------------------------------------------------------+
|                    THE PERFORMANCE AUDIT PLANNING TRINITY                         |
+-----------------------------------------------------------------------------------+
|  AUDIT OBJECTIVES    | What specific governance or performance questions will     |
|                      | the audit answer?                                          |
|----------------------|------------------------------------------------------------|
|  AUDIT SCOPE         | What are the operational, geographic, and temporal         |
|                      | boundaries of the review?                                  |
|----------------------|------------------------------------------------------------|
|  AUDIT METHODOLOGY   | What sampling methods, data analyses, and fieldwork tests  |
|                      | will be deployed to gather empirical evidence?             |
+-----------------------------------------------------------------------------------+

---

Gathering Sufficient, Appropriate Audit Evidence

Under GAGAS Fieldwork Standards (Chapter 8), auditors must obtain sufficient, appropriate evidence to provide a reasonable basis for their findings and conclusions relative to the audit objectives:

• Sufficiency: The measure of the quantity of evidence. Auditors must obtain enough evidence to persuade a knowledgeable, reasonable third party that the findings and conclusions are valid.
• Appropriateness: The measure of the quality of evidence, encompassing its relevance (logical relationship to the audit objective) and validity/reliability (dependability, accuracy, and truthfulness of the information source).

The Four Primary Categories of Audit Evidence

+-----------------------------------------------------------------------------------+
|                       THE FOUR CATEGORIES OF AUDIT EVIDENCE                       |
+-----------------------------------------------------------------------------------+
|  1. TESTIMONIAL EVIDENCE                                                          |
|     • Statements gathered through interviews, surveys, questionnaires, and focus  |
|       groups. Inherently subjective; generally CANNOT stand alone as sole proof.  |
+-----------------------------------------------------------------------------------+
|  2. DOCUMENTARY EVIDENCE                                                          |
|     • Established records: contracts, invoices, emails, laws, regulations, general|
|       ledgers, database extracts, and standard operating procedures (SOPs).       |
+-----------------------------------------------------------------------------------+
|  3. PHYSICAL EVIDENCE                                                             |
|     • Direct observation or inspection of people, assets, construction projects,  |
|       facilities, inventory, or physical events by the audit team.                |
+-----------------------------------------------------------------------------------+
|  4. ANALYTICAL EVIDENCE                                                           |
|     • Computations, trend analyses, econometric modeling, benchmarking, regression|
|       analysis, and variance comparisons performed by the auditor.                |
+-----------------------------------------------------------------------------------+

Assessing Evidence Reliability and Corroboration

Evidence gathered from independent external sources (e.g., bank confirmations, vendor records) is generally more reliable than evidence obtained solely from auditee personnel. Similarly, documentary evidence maintained under strong internal controls is more reliable than records from weak control environments.

Exam Rule on Corroboration: Testimonial evidence alone is rarely sufficient to support critical performance audit findings. Auditors must corroborate oral statements with independent documentary, physical, or analytical evidence to establish objective validity.

---

Materiality and Significance in Performance Auditing

In financial statement auditing, materiality is primarily evaluated through quantitative dollar thresholds (e.g., misstatements exceeding 1% of total expenditures). In performance auditing, GAGAS introduces the broader concept of significance:

• Significance: The relative importance of a matter within the context in which it is being considered. Significance includes both qualitative and quantitative factors.
• Qualitative Significance: A matter may be of supreme significance regardless of dollar size if it involves public health and safety, violation of constitutional rights, statutory noncompliance, public visibility, sensitive citizen data, or systemic fraud risk.

---

The Common Elements of a Well-Developed Audit Finding

When an auditor uncovers an operational breakdown, compliance violation, or inefficiency, A well-developed performance-audit finding commonly uses the following elements; GAGAS makes their inclusion and depth dependent on the audit objectives and circumstances:

+-----------------------------------------------------------------------------------+
|                     COMMON ELEMENTS OF A WELL-DEVELOPED AUDIT FINDING                |
+-----------------------------------------------------------------------------------+
|  1. CRITERIA         | "WHAT SHOULD BE"                                          |
|                      | The statutory, regulatory, contractual, or operational     |
|                      | standard against which current performance is measured.   |
|----------------------|------------------------------------------------------------|
|  2. CONDITION        | "WHAT IS"                                                 |
|                      | The actual, empirical operational situation observed       |
|                      | during audit fieldwork and testing.                       |
|----------------------|------------------------------------------------------------|
|  3. CAUSE            | "WHY IT HAPPENED"                                         |
|                      | The underlying systemic root cause or operational defect   |
|                      | that allowed the gap between criteria and condition.      |
|----------------------|------------------------------------------------------------|
|  4. EFFECT / POTENTIAL| "WHAT DIFFERENCE IT MAKES"                               |
|     EFFECT           | The actual or potential negative consequence, financial   |
|                      | loss, safety hazard, or programmatic impact.              |
|----------------------|------------------------------------------------------------|
|  5. RECOMMENDATION   | "WHAT NEEDS TO BE DONE"                                   |
|                      | The constructive, actionable guidance directed to          |
|                      | management to correct the condition and eliminate cause.  |
+-----------------------------------------------------------------------------------+

1. Criteria ("What Should Be")

Criteria establish the authoritative benchmark against which performance is compared. Sources of criteria include:

• Federal, state, or municipal statutes and ordinances;
• Code of Federal Regulations (CFR) and executive orders;
• Grant agreements, contracts, and OMB circulars;
• Internal agency policies, handbooks, and SOPs;
• Professional industry best practices, engineering standards, or performance targets.

2. Condition ("What Is")

Condition describes the actual operational reality documented by the auditor during testing. Condition must be supported by empirical evidence, identifying the frequency, distribution, and dollar magnitude of observed errors or failures (e.g., "In a representative sample of 120 child care benefit payments, 42 payments totaling $385,000 were issued without required proof of parental income on file").