Audit Committee Responsibilities That Protect Trust

A clean audit opinion is valuable, but it is not a substitute for informed governance. Audit committee responsibilities begin well before the auditors present their findings: when the committee asks whether financial reports tell the full story, whether controls work in practice, and whether management has elevated the issues the board needs to see.

For nonprofits, governmental entities, schools, housing organizations, and regulated businesses, the audit committee is a central line of accountability. Its work helps protect mission resources, public funds, lender confidence, and the credibility of leadership. The committee does not run the finance function or perform the audit. Its role is to provide independent oversight, challenge assumptions constructively, and ensure significant risks receive appropriate attention.

What Audit Committee Responsibilities Actually Cover

The committee's authority should be defined in a written charter approved by the governing board. A thoughtful charter establishes membership and independence requirements, meeting frequency, access to records and advisors, and the reporting relationship with the board. It also makes clear where the committee's work ends and management's work begins.

At its core, an audit committee oversees the integrity of financial reporting, the external audit process, internal controls, and significant compliance and ethics matters. The exact scope depends on the organization. A public charity receiving substantial federal awards faces different exposure than a closely held company with bank covenants, while a housing authority may need sustained attention to HUD requirements, tenant-related revenue, procurement, and program reporting.

The committee should not simply receive a completed audit report and vote to accept it. That approach treats governance as a ceremonial exercise. Effective oversight requires discussion throughout the reporting cycle, especially when there are major transactions, new funding sources, operating pressures, changes in key personnel, or known control concerns.

Financial reporting oversight

Committee members should understand how management prepares the financial statements and whether the reporting process identifies errors before year-end. This includes reviewing significant accounting policies, material estimates, unusual transactions, related-party activity, liquidity disclosures, debt arrangements, and going-concern considerations where applicable.

The objective is not for every committee member to become an accounting specialist. It is to make sure the board has the clearest picture it will ever get of the organization's financial condition and reporting judgments. A useful question is: What would a reasonable funder, regulator, lender, donor, or taxpayer need to know to understand this financial statement fully?

For organizations subject to Uniform Guidance, this oversight extends beyond the basic financial statements. The committee should understand major programs, the schedule of expenditures of federal awards, audit findings, questioned costs, and the status of prior findings. A finding that appears narrow can still point to a broader weakness in grant administration, procurement, time and effort documentation, or subrecipient monitoring.

External auditor oversight

The audit committee is ordinarily the board's primary connection to the independent auditor. It should participate in auditor selection or recommendation, review the proposed scope and timing of the engagement, consider audit fees in context, and assess whether the audit team has the expertise required for the engagement.

Independence deserves more than a routine confirmation. The committee should discuss any non-audit services, relationships, or circumstances that could affect, or appear to affect, the auditor's objectivity. For governmental audits and Single Audits, technical qualifications and relevant regulatory experience matter as much as independence. An audit firm that understands Yellow Book requirements, Uniform Guidance, HUD programs, or complex nonprofit revenue can identify issues that a generalist may not recognize early enough.

A private executive session with the auditor is equally important. Management should have the opportunity to explain its position, but auditors also need a setting in which they can speak candidly with the committee. Ask whether management was cooperative, whether information was provided promptly, whether disagreements occurred, and whether there are matters that did not rise to the level of a formal finding but warrant board attention.

Internal Control Is a Governance Question

Internal control is often misunderstood as a finance department checklist. In reality, controls reflect whether an organization has designed reliable ways to authorize spending, safeguard assets, record activity accurately, limit conflicts of interest, and respond when something goes wrong.

Audit committees should focus on the controls that matter most to the organization's risk profile. In a school district, that may include purchasing, payroll, student activity funds, and restricted grants. In a human-services provider, it may include service documentation, billing, payroll allocation, and Medicaid or HHS reporting. In affordable housing, it may involve cash management, development costs, reserve accounts, tenant receivables, and compliance reporting.

The right question is not whether a policy exists. It is whether the policy is followed, monitored, and updated when conditions change. A policy requiring two approvals is not an effective control if staff routinely approve expenses after payment or if the same person can initiate, approve, and reconcile a transaction.

When auditors communicate a deficiency, the committee should resist two unhelpful reactions: treating every matter as proof of misconduct or dismissing it as a technicality. The more useful response is to understand the cause, risk, corrective action, accountable owner, and expected completion date. Management's remediation plan should be specific enough for the committee to monitor at subsequent meetings.

Compliance, Ethics, and the Ability to Surface Problems

Many of the most consequential risks do not first appear as accounting errors. They emerge through weak procurement practices, incomplete grant files, conflicts of interest, inaccurate program reporting, retaliation concerns, or a culture in which staff are reluctant to raise questions.

The audit committee should oversee mechanisms for reporting concerns confidentially and without retaliation. Depending on the organization's size and structure, this may include a whistleblower policy, a hotline, a designated board contact, or another documented reporting channel. The committee does not need to investigate every concern itself. It does need confidence that allegations are triaged appropriately, investigated independently when necessary, documented, and reported to the board at the right level.

Compliance oversight also requires judgment about materiality. Not every exception warrants a full board discussion. Repeated exceptions, matters involving senior personnel, potential fraud, regulatory noncompliance, or issues that could jeopardize funding should receive prompt attention. A committee that has agreed in advance on escalation criteria is less likely to be surprised by a significant problem.

How to Make Meetings More Useful

Strong committee meetings are organized around decisions, risks, and follow-up, not lengthy presentations. Members should receive materials early enough to read them, including draft financial statements when available, auditor communications, a status report on prior findings, key compliance developments, and a concise dashboard of issues requiring oversight.

Meeting agendas should reserve time for the committee to ask questions rather than simply hear updates. Useful questions include whether any balances or disclosures required difficult judgment, what changed since the prior reporting period, which controls depend too heavily on one individual, and whether management has the capacity to complete corrective actions on time.

The committee should also document its work carefully. Minutes need not reproduce every conversation, but they should show that members reviewed key matters, asked appropriate questions, received responses, and tracked action items. This record is especially valuable when regulators, funders, or stakeholders later ask how the board exercised oversight.

Avoiding common role confusion

Committee independence does not mean hostility toward management. The most effective committees create a disciplined, respectful relationship in which management can raise difficult issues early without fearing that every problem will be treated as a failure.

At the same time, committee members should avoid stepping into operational management. Directing staff, approving routine transactions, or rewriting accounting schedules can blur accountability and weaken the committee's ability to oversee objectively. The committee's task is to ask whether management has an effective process, sufficient resources, and a credible plan to address risk.

For smaller organizations, perfect segregation of duties may not be practical. That does not eliminate the need for control. It changes the design. Board-level review of bank activity, timely reconciliations, approval of disbursements, and periodic review of payroll or vendor changes may serve as compensating controls. The committee should understand both the limitation and the discipline required to offset it.

A Charter Is Only as Good as Its Follow-Through

An audit committee charter should be reviewed periodically, particularly after a merger, major funding change, leadership transition, new debt arrangement, or expansion into a regulated program. Responsibilities that made sense when an organization was smaller may no longer provide adequate coverage.

Committee composition should receive the same attention. Financial literacy is essential, and at least one member should be capable of understanding audited financial statements, internal-control communications, and significant accounting judgments. But technical expertise alone is not enough. Members also need independence, preparation, sound judgment, and the willingness to ask direct questions.

Partner-level attention from an experienced audit team can help committees distinguish between routine matters and issues that deserve sustained board focus. Still, the governing responsibility remains with the committee and board. An independent audit provides evidence and perspective; it does not transfer stewardship to the auditor.

The most useful audit committee is not the one that meets the most often or produces the longest minutes. It is the one that creates a reliable habit of asking what could affect the integrity of reporting, the stewardship of resources, and the organization's ability to fulfill its mission. That habit gives leadership room to address concerns while they are still manageable.