Report Distribution

Requirements: Report Distribution

9.56

Distribution of reports completed in accordance with GAGAS depends on the auditors’ relationship with the audited organization and the nature of the information contained in the reports. Auditors should document any limitation on report distribution. Auditors should make audit reports available to the public, unless distribution is specifically limited by the terms of the engagement, law, or regulation.

Report Distribution for Internal Auditors

9.57

If an internal audit organization in a government entity follows the Institute of Internal Auditors’ International Standards for the Professional Practice of Internal Auditing as well as GAGAS, the head of the internal audit organization should communicate results to the parties who can ensure that the results are given due consideration. If not otherwise mandated by statutory or regulatory requirements, prior to releasing results to parties outside the organization, the head of the internal audit organization should (1) assess the potential risk to the organization, (2) consult with senior management or legal counsel as appropriate, and (3) control dissemination by indicating the intended users in the report.

Report Distribution for External Auditors

9.58

An audit organization in a government entity should distribute audit reports to those charged with governance, to the appropriate audited entity officials, and to the appropriate oversight bodies or organizations requiring or arranging for the audits. As appropriate, auditors should also distribute copies of the reports to other officials who have legal oversight authority or who may be responsible for acting on audit findings and recommendations and to others authorized to receive such reports.

9.59

A public accounting firm contracted to conduct an audit in accordance with GAGAS should clarify report distribution responsibilities with the engaging party. If the contracting firm is responsible for the distribution, it should reach agreement with the party contracting for the audit about which officials or organizations will receive the report and the steps being taken to make the report available to the public.

Application Guidance: Report Distribution for External Auditors

9.60

Making an audit report available to the public can involve auditors posting the audit report to their publicly accessible websites or verifying that the audited entity has posted the audit report to its publicly accessible website.