Andrew ChilesRepeated Audit Issues Expose Follow-Up Gaps
Organizations today face a multiplicity of audits – financial audits, IT security audits, operational compliance reviews, and more – each often generating a list of findings and recommended corrective actions. In a fast-changing regulatory environment, keeping track of these audit issues and ensuring they are resolved is more challenging – and more crucial – than ever. Recent headlines offer stark examples of what happens when audit findings fall through the cracks, as well as calls from officials for stronger follow-through. This roundup highlights key audit and compliance issues from the news and why effective audit issue tracking is vital, then explores how AuditFindings provides a platform to help organizations stay on top of audit issues far beyond the limits of spreadsheets.
When Audit Findings Go Unaddressed: Cautionary Tales
One high-profile case emerged at Florida A&M University, where auditors uncovered “multiple delayed reconciliations, poor internal controls and the continuation of financial issues the [university] system has failed to address for over a decade”[1]. The state Board of Governors lambasted the university’s CFO after discovering that many of the same problems identified as far back as 2013 were still unresolved in the latest audit. In fact, the board had been tracking over 30 corrective actions since 2013, yet “many of the problems highlighted in the latest audits are similar to those identified back then”[2]. This decade-long repeat of findings indicates a systemic failure to implement effective fixes. The fallout was severe: board members publicly questioned the CFO’s performance, and the university’s leadership moved to impose new oversight measures. For example, a monthly “scorecard” was put in place to monitor progress on audit issues and ensure corrections stay on track[3]. The Florida A&M case underscores that simply identifying issues is not enough – without a robust follow-up process, critical problems can persist for years, undermining financial integrity and management credibility.
It’s not an isolated incident. In another example, a West Virginia legislative audit found that a state agency had accumulated repeat findings over an 11-year period because leadership failed to address prior audit recommendations[4]. The audit report bluntly stated it was “concerning that [agency] leadership failed to address multiple repeat audit findings over an 11-year period” and urged management to implement controls for prompt remediation of audit findings[4]. Situations like these – where the same issues resurface year after year – highlight the serious risks when organizations don’t close the loop on audit findings. Problems that go uncorrected can lead to financial losses, compliance penalties, operational breakdowns, and public embarrassment once they finally come to light.
Even at the federal level, concerns have been raised that audits aren’t driving the improvements they should. In a 2025 memo, a U.S. oversight official called for a “strategic reset” of federal financial audits, noting that “audits are not working as intended” in many cases[5]. He pointed out that some agencies dutifully get clean audit opinions for years “despite squandering hundreds of millions of dollars in wasted, improper payments,” meaning the audit process failed to prevent massive waste[5]. The memo observed that while some organizations use audit findings to strengthen controls, too many treat audits as a rote annual exercise rather than a tool for accountability and improvement[6]. In short, pouring time and money into audits is of little value if the resulting findings and recommendations don’t translate into real corrective action. These critiques echo the same core lesson as the headline-grabbing cases above: failing to follow through on audit findings can undermine the entire purpose of the audit.
Turning Findings into Improvements: The Importance of Follow-Through
The flip side of these cautionary tales is that when organizations do act on audit findings, they can reap significant benefits. Audit findings, after all, are opportunities to fix weaknesses and strengthen operations. Forward-thinking teams recognize this. As one industry publication noted, “regular audits fuel a culture of continuous improvement by turning every finding (big or small) into fuel for improvement.” Rather than seeing audits as a one-time compliance drill, “forward-thinking teams use it as a springboard for ongoing tweaks,” treating audit findings as part of a recurring conversation on how to get better[7]. In other words, each finding closed is a chance to improve processes, reduce risks, and enhance performance. Companies that consistently address their audit issues tend to build stronger internal controls and a reputation for good governance, whereas those that ignore issues invite compounding problems.
Notably, audit and compliance frameworks formalize the expectation that findings will be tracked and resolved. For instance, ISACA’s IT Audit Framework directs auditors to “monitor and periodically report…management’s progress on findings and recommendations”, including whether “appropriate, timely action” is being taken to address reported issues[8]. Internal audit functions are often required to follow up and report to the audit committee on the status of prior audit recommendations until they are fully implemented. These best practices reinforce that accountability for audit results is an ongoing process – management should either fix the issue or formally accept the risk if a finding will not be corrected, and governance bodies must be kept informed[9]. All of this relies on having a systematic way to track audit findings, owners, deadlines, and remediation status.
Unfortunately, many organizations still rely on ad-hoc tools – especially spreadsheets – to track outstanding audit issues. While a spreadsheet list might work for a handful of items, it quickly breaks down when a company is juggling dozens or hundreds of findings from multiple audits. Spreadsheets easily become out-of-date, have limited collaboration features, and provide no automatic reminders or roll-up visibility. It’s no wonder that busy teams can overlook items when using manual trackers. Indeed, as problems like those at Florida A&M and DHSEM illustrate, gaps in tracking and accountability often lead to findings slipping through the cracks. To avoid these pitfalls, organizations are increasingly turning to dedicated audit issue management systems designed to ensure nothing falls off the radar.
Beyond Spreadsheets: How AuditFindings Helps Close the Loop
AuditFindings was born out of the very need to improve audit follow-through. Our founder, Brad Fenster – an experienced FDIC auditor – “witnessed many organizations failing to adequately resolve audit, regulatory, or compliance issues, regardless of the size or type of organization.” In contrast to static spreadsheets, AuditFindings offers a comprehensive, purpose-built system for audit issue management. Here are some of the ways we help organizations stay on top of findings and drive them to closure:
· Central Dashboard for Visibility: AuditFindings serves as a command center for all your audit issues. The dashboard gives each user a quick, comprehensive view of all open (non-archived) issues they have access to, including high-level charts of Issues by Priority and by Status. This at-a-glance view ensures management can see the overall status of audit findings across the organization and ensure none go without corrective action. Rather than juggling multiple spreadsheets or emails, all outstanding issues are consolidated in one place.
· Assignment and Accountability: To drive accountability, each issue in AuditFindings can be assigned to an owner responsible for its resolution. In fact, we allow as many assignees as necessary to be attached to an issue, facilitating collaboration when multiple people need to be involved. Clearly designating who is responsible for each finding (and who is following it) prevents the “assigned to everyone and no one” problem that often plagues email or spreadsheet trackers. Users can even click an “Assigned to Me” tab on the dashboard to instantly see the issues they personally need to address. Automatic notifications and updates ensure that assignees are aware of new issues or approaching due dates.
· Timeline Tracking and Reminders: AuditFindings tracks the age of each open issue automatically, so you know exactly how long a finding has been outstanding. AuditFindings also highlights any potential oversights. For example, the dashboard flags problematic issues such as items with no status, no priority, no issue date, or no due date set. These are the kinds of omissions that often cause findings to slip by in a manual process. When issues lack basics like a due date or status, an organization might overlook them, resulting in the dreaded “uncorrected findings” status. We help prevent that by providing quick access to these easily overlooked items so they can be fixed. In short, AuditFindings is designed to make sure every audit issue is captured, given a priority and deadline, and monitored until closure – no more forgotten entries on a neglected spreadsheet tab.
· Bulk Updates and Efficiency: Managing dozens of findings can be time-consuming, so AuditFindings includes time-saving features to streamline the process. For instance, bulk-action edits allow an audit manager to select multiple issues and apply an update in one go. With a few clicks, you could close a batch of issues that have been resolved, assign a group of findings from one audit to a specific team lead, update the status or priority of many items at once, and so on. The result is a more efficient workflow, especially for audit leaders who oversee large issue logs.
· Integration and Easy Adoption: Recognizing that many organizations start out tracking audits in Excel, AuditFindings makes it easy to transition. Users can import issues with ease – the most common method is simply uploading a spreadsheet (CSV or Excel). This helps teams adopt the system quickly without losing any legacy information. Within the platform, custom fields can be added to mirror any data points you tracked in your sheets, ensuring nothing is lost in translation. The bottom line is that moving from a spreadsheet to AuditFindings is a seamless process – and once your data is in, it becomes far more actionable.
· Moving Beyond “Multiple Spreadsheets”: Perhaps the strongest endorsements come from professionals who have felt the pain of manual tracking and then switched to AuditFindings. As one compliance manager described, after using the free trial “we actually use the software for all of our audits and not just audit findings. I find it easy to organize all of our audits and love not having to work out of multiple spreadsheets.” Another user put it even more succinctly: “This tool…sure beats using spreadsheets,” noting how quickly it helped them get organized and keep track of audit items. By centralizing the information, providing real-time status updates, and enforcing a structured workflow, the platform frees audit and compliance teams from chasing scattered files and emails. Instead, they can devote time to actually resolving issues and improving controls, confident that nothing is being forgotten.
Conclusion: From Findings to Resolution
The recent cases of unresolved findings and the calls for greater accountability serve as a powerful reminder: an audit’s value is only realized when its findings lead to action. It’s all about having the right processes and tools in place to close the loop.
AuditFindings has emerged to fill this critical need. By providing a purpose-built audit issue management platform delivered through a secure, cloud environment, we enable organizations to create the accountability and transparency that regulators and boards
increasingly expect – and that effective risk management demands. In a world where companies might undergo multiple audits a year and face evolving compliance pressures, AuditFindings is invaluable for keeping each finding from each audit on the radar and driving it to resolution.
Ultimately, the goal is to transform audit findings from a static list in a report into real improvements in your organization’s controls and processes. With a robust follow-up process and supportive technology, audit and compliance teams can ensure that no issue is left lingering unattended. The weekly headlines may continue to reveal examples of what goes wrong without follow-through, but with the right approach, your organization can instead become a positive example – one that leverages audits as a tool for continuous improvement and sustained compliance success. In the end, an audit finding is only the beginning; it’s what you do next that truly matters.
[1] [5] [6] Friday Footnotes: OMB Says Audits Aren’t Working As Intended; Deloitte Predicts Our Economic Future | 6.27.25 – Going Concern
[2] [3] Florida A&M University’s CFO blasted by state board over systemic audit failures | CFO.com
[4] Audit details failures of WV emergency management office to draw down federal dollars | WV News | wvnews.com
[7] How Audit Findings Drive Strategic Business Improvements
https://www.hintonburdick.com/audit-findings-business-improvements/
[8] [9] ISACA Now Blog 2025 Follow Up Audits and Follow Up Process The Auditors Impact Litmus Tool