Recommendations and follow-up actions

How to Write Effective Recommendations and Follow-Up Actions

Recommendations and follow-up actions are a key part of reporting audit findings. They help the organisation understand what needs to be fixed and how to improve. Without clear recommendations, the audit report cannot guide management to make changes. Follow-up actions ensure that the suggested improvements are actually carried out.

When writing recommendations, be clear and practical. Use simple language that the readers can easily understand. Each recommendation should match a specific problem found during the audit. Explain what should be done to fix the issue, who should be responsible, and when it should be completed. Vague or general advice is not helpful.

Use the following steps to create strong recommendations and follow-up actions:

1. Identify the Issue: Describe the problem or risk found in the audit clearly and briefly.
2. Make Specific Recommendations: Suggest precise actions to correct the issue. This can include new procedures, improved controls, or staff training.
3. Assign Responsibility: Name the department or individual responsible for taking the action.
4. Set a Deadline: Include realistic timeframes for when the action should be completed.
5. Plan Follow-Up: Explain how the internal audit team or management will check that the recommendation has been implemented.

Follow-up actions are important to track progress and confirm that problems are fixed. After the report is finalised, internal auditors usually schedule follow-up audits or meetings. They verify whether the recommendations were applied and if they are effective. If problems remain, extra recommendations or support may be needed.

Remember, the goal of recommendations and follow-up actions is to help the organisation improve controls and reduce risks. Well-written and tracked recommendations add value and show that the audit process is not just about finding faults, but about enabling positive change.