Audit Reporting, Communication, and Follow-Up
What to know
Audit reports communicate findings, criteria, condition, cause, effect, and recommendations. A strong finding states the criteria (the rule), the condition (what was found), the cause, the effect (risk/dollars), and a recommendation. Reports should be clear, objective, timely, and constructive. Understand the difference between a draft and final report, management responses (agree/disagree with action plan and due date), and the follow-up process that verifies remediation. Communication includes exit conferences and ongoing stakeholder updates.
Traps
Questions blur 'recommendation' with 'management action plan'-auditors recommend; management owns the fix. Another trap: reporting opinions without sufficient evidence, or burying the finding without the criteria. Watch for auditors who fail to follow up-unresolved findings remain open until verified. Also, avoid inflammatory language; reports should be factual.
Rule of thumb
Every finding must answer: What rule? What happened? Why? So what? Now what? If any element is missing, the finding is incomplete.
Worked example
A finding states: 'Ten of 60 claims lacked a required modifier (condition), contrary to payer policy (criteria), because staff were untrained (cause), risking $X in denials (effect).' Management agrees to retrain by a date; the auditor schedules follow-up testing to verify the fix.