Follow-Up Audits
Re-test corrective actions to verifiable evidence.
Follow-up audits that re-test whether management implemented corrective actions — each prior finding marked Fully, Partially or Not Implemented with supporting evidence, escalating repeat failures.
What you get
- Re-testing
- Implementation status
- Escalation
Why it matters
Closed means re-tested, not just reported.
A finding is only as good as its closure. Follow-up audit is the discipline of re-testing whether management actually implemented the corrective action it committed to — not whether it said it did. The IIA mandates it under Standard 2500, and in the public sector it is the mechanism by which AGSA action plans are verified. Without it, an audit is a one-time photograph; with it, the loop closes and accountability becomes real.
The failure mode is familiar. Management reports a finding as 'resolved', the action plan is ticked, and the next AGSA cycle re-raises the identical finding because nothing was re-tested against evidence. Repeat findings dominate the AGSA general report precisely because follow-up is treated as a formality. When status is self-reported on a spreadsheet, partial and cosmetic fixes pass as full implementation.
Rigorous follow-up re-tests each prior finding against fresh evidence and marks it Fully, Partially or Not Implemented — with the proof attached. Repeat non-implementation escalates into consequence management, and the results feed the Audit Committee report and AGSA action-plan verification directly, so 'closed' means closed.
Capabilities
What Follow-Up Audits does.
Re-testing
Each prior finding is re-tested against fresh evidence.
Implementation status
Fully / Partially / Not Implemented with the evidence behind it.
Escalation
Repeat non-implementation escalates to consequence management.
Outcomes
What changes for your team.
Tangible improvements an entity sees once Follow-Up Audits replaces the spreadsheet.
How it works
From data to defensible signal.
Want to see Follow-Up Auditsrunning on your entity's own data?
Enquire nowWho it's for
- Internal Audit follow-up team and CAE
- Audit Committee
- Original auditees
- AGSA repeat-finding analysts
Legislative basis
- IIA Standard 2500 — monitoring progress on engagement results
- MFMA s.131 — action plan to address AGSA findings
- Public Audit Act s.5 — AGSA recommendations and follow-up
- National Treasury MFMA Circular 84 — AGSA action plans
FAQ
Questions teams ask before they sign up.
How does this support AGSA action-plan verification?
Each AGSA finding's corrective action is re-tested against evidence and marked Fully, Partially or Not Implemented, giving you the verified status AGSA looks for rather than an unsupported claim of closure.
What happens when management keeps failing to implement?
Repeat non-implementation escalates into the consequence-management workflow, so persistent failure to remediate triggers accountability rather than another quiet re-raise.
Where do the results go?
Implementation status feeds the Audit Committee report and the AGSA action-plan verification directly, with the supporting evidence on record.
Want to know more about Follow-Up Audits?
Tell us about your entity and we'll be in touch with a walkthrough, pricing and next steps — everything you see is traceable to source.