Audit Reporting and Communication: Turning Findings into Action
The report is the product
A finding without a written, evidenced report does not exist. Each finding should carry the criteria (rule, policy, or contract requirement), the condition (what you actually found, with counts), the cause, the effect or risk, and a recommendation with an owner and a due date. Missing any of these and reviewers send it back.
Structure
Typical sections are purpose and objectives, scope and period, methodology and sampling approach, summary of results, detailed findings with risk ratings, management responses, and the action plan. State your limitations - what the sample cannot tell you.
Tone and objectivity
Write factually and neutrally. "Three of twenty records (15%) lacked an authenticating signature" outperforms "the provider failed to do their job." Avoid naming individuals; use role or provider identifier. Keep opinions out of findings and keep work papers that support every number printed.
Communication
Hold an exit conference so the auditee hears results before the draft circulates; it improves accuracy and reduces friction. Distribute on a need-to-know basis, since reports contain PHI and provider-identifying data. Track management responses, agreed actions, and due dates, and report status until closure.
Worked example
Finding: 10 of 40 claims (25%) billed 99214 while the note documented straightforward MDM. Criteria: 2021 E/M MDM guidelines. Cause: no training since the guideline change. Effect: overpayment exposure and payer recoupment risk. Recommendation: retrain, re-audit in 90 days, owner named.
Traps
Drawing conclusions the sample cannot support; omitting criteria; accepting "we will fix it" without a date; and burying the highest-risk finding on page nine.
Rule of thumb
Criteria, condition, cause, effect, recommendation, owner, due date - seven items or it is not a finding.