6 Threats to Audit Quality

Let’s talk about something most auditors won’t admit out loud. Sometimes, one of the biggest threats to audit quality isn’t a sneaky client or a missing receipt… it’s us. Yep. The audit organization itself is one of six threats to audit quality, which is the very thing we’re sworn to uphold.

The GAO Yellow Book Section 5.34 plants this truth squarely in our lap: Risks (to the quality of an audit) may result from conditions, events, circumstances, actions, or inactions that adversely affect the performance of an audit or compliance with professional standards and applicable legal and regulatory requirements.

In other words, it’s not just about whether the auditee gave us the right data. It’s about whether we, as individuals and as organizations, are equipped, prepared, and structured to deliver quality work in the first place.

So, what kinds of internal risks are we talking about? Let’s dive into the categories from Sections 5.36 and 5.37 and unpack them in simple terms.

1. The nature of the beast: Your organization might be… complicated

5.36(a): The complexity and operating characteristics of the audit organization

Some audit shops are lean and mean. Others are more like an onion with layers of bureaucracy, confusing chains of command, and processes that haven’t been updated since fax machines were cool. When your organization is overly complex, it creates opportunities for things to fall through the cracks. Examples include missed reviews, inconsistent training, or unclear accountability for who signs off on what. The more moving parts, the more potential for audit quality to suffer.

👉 What to watch for:

Redundant procedures
Unclear roles and responsibilities
Outdated workflows

2. Strategy meets reality: When big decisions backfire

5.36(b): The strategic and operational decisions and actions of the audit organization

Sometimes leadership makes choices that sound good on paper. But in practice, they stretch staff too thin or prioritize flashy projects over foundational quality. Ever been told to “do more with less” or pivot to a new priority while your current audit backlog quietly bursts into flames? Strategic decisions set the tone for how work gets done. If those decisions prioritize volume, politics, or speed over quality, everyone feels the impact.

👉 What to watch for:

Unrealistic deadlines
Shifting priorities with little guidance
Emphasis on “checking the box” over meaningful conclusions

3. Leadership vibes: Tone at the top is everything

5.36(c): The characteristics and management style of leadership

Let’s just say it. A micromanaging, indecisive, or disengaged leader is a threat to audit quality. On the flip side, a thoughtful, ethical, and communicative leadership team builds trust, fosters accountability, and helps auditors do their best work. Leadership isn’t just about issuing directives. It’s about modeling professional skepticism, encouraging learning, and standing firm when audit results are politically inconvenient.

👉 What to watch for:

“Yes people” culture
Lack of feedback or mentoring
Fear-based leadership or favoritism

4. Stretching resources: When you don’t have what you need

5.36(d): The resources of the audit organization, including those provided by service providers

Audit quality suffers when auditors are expected to do their jobs without adequate support, whether that’s time, staffing, tools, or training. This also applies to outsourced work. Are your IT specialists, data analysts, or external reviewers competent? Available? Vetted?

👉 What to watch for:

Inadequate audit tools or templates
High turnover or unfilled positions
Overreliance on third parties without proper oversight

5. The legal labyrinth: Navigating laws, regs & standards

5.36(e): Law, regulation, professional standards, and the environment in which the audit organization operates

Every auditor knows the rulebook is thick. But what happens when there’s a disconnect between what’s required and how the organization operates? Or when a new regulation quietly changes the rules but no one in the office gets the memo? Being out of sync with evolving standards (GAGAS, state law, or internal policies) can cost you your reputation and trigger rework.

👉 What to watch for:

Failure to update audit manuals
Compliance gaps
Ambiguity around which standards apply to which engagement

6. Audit engagements: The work itself can be risky

Section 5.37 pivots to the engagement-level risks. It’s not about the whole organization this time, but the actual audits being performed.

The types of engagements & reports

Not all audits are created equal. Some engagements (like performance audits of law enforcement, or opinion audits involving bond arbitrage) are inherently more sensitive, complex, or politically-charged. Certain reports carry a higher risk of scrutiny, or even legal blowback.

👉 What to watch for:

Unclear audit objectives
Limited scope but high expectations
Politically sensitive topics

The entities you’re auditing

Auditing a tiny, three-person, not-for-profit daycare is much less complex than expressing an opinion on the financial statements of a state pension system. So, the type of entity directly affects your ability to conduct a quality audit.

👉 What to watch for:

Highly technical accounting issues involving plenty of professional judgment
Idiosyncratic and confusing jargon and concepts
Entities with complex or decentralized operations

Face the 6 threats to audit quality!

Here’s the hard truth: recognizing threats to audit quality means looking in the mirror. It means being honest about what’s happening inside the audit organization, not just the problems outside of it.

That’s why the Yellow Book doesn’t just wag a finger at auditees. As per usual, the GAO challenges auditors to evaluate our own situation: the internal conditions, decisions, leadership, and resourcing we control. This ensures we’re not inadvertently sabotaging the quality of our work. The 2024 Yellow Book asks auditors to conduct a formal risk assessment against 6 audit quality objectives.

So, whether you’re an audit director or a newly minted staff auditor, ask yourself:

Does our structure support quality?
Are our leaders fostering it or fighting it?
Do our engagements align with our skills and capacity?

If the answer to any of these questions is no, let’s be brave enough to call it out and fix it pronto!

Looking for high-quality and convenient CPE?

We have you covered! Our live webinars are a great choice if you want the learning to come to you. Just log on at the scheduled time and enjoy wherever you are! Here are a few of our upcoming courses:

Sept 23: Manage Audit Projects Using Microsoft Planner (2 CPE Hours)
Oct 9: Data Analytics Deep Dive for Dazzling Audits (4 CPE Hours)
Oct 15: Excel Charts & Graphs (2 CPE Hours)
Oct 16: Would You Recognize Fraud? Government Cases (2 CPE Hours)
Oct 28: Measuring Audit Value, Not Just Activity (2 CPE Hours)

Need to do things at your own speed, but still get all your credits? Plan your CPE around your life, not the other way around! Yellowbook-CPE.com has dozens of self-study e-book and video courses, including the Essentials Skills Bundle. Are you a new auditor, or trying to get a new hire up to speed? This bundle of courses is for you. Through a combination of video and text, new auditors will learn how to think through an audit project on their own AND learn critical client relation skills.

6 Threats to Audit Quality