A municipal audit is an independent examination of a local government’s financial records, internal controls, and operations, carried out to confirm that public money was spent as authorized and that the government’s published financial numbers are reliable. The result is a public report that residents, bond investors, and state and federal oversight agencies use to hold local officials accountable. Depending on what needs to be verified, a municipal audit can focus on the financial statements, on compliance with the rules attached to grant money, or on whether a specific program is actually delivering results.
The Three Types of Municipal Audits
Not every audit answers the same question. A financial audit checks whether the government’s financial statements are presented fairly under Generally Accepted Accounting Principles.1Office of Justice Programs. Generally Accepted Accounting Principles (GAAP) Guide Sheet The auditor tests account balances, revenues, expenditures, and debt figures against what actually happened during the fiscal year, and issues an opinion letter that citizens and bond investors rely on to judge financial health. This is the most common type, and the one most municipalities are required to undergo.
A compliance audit asks a narrower question: did the municipality follow the specific rules attached to the money it received? This matters most when federal or state grants are involved, since grant funds come with strings. Auditors verify that money was spent on the intended programs, that required matching contributions were made, and that eligibility rules for beneficiaries were followed. Violations can lead the federal government to demand its money back or restrict future funding.
Performance audits look past the numbers to evaluate whether a program is achieving its goals at a reasonable cost. An auditor might assess whether a fleet maintenance program is cost-effective, or whether a housing assistance program is actually reaching its target population. The output is usually a set of specific recommendations for improving service delivery.
The Standards a Municipal Audit Must Follow
Municipal audits sit under a layered set of rules. Federal standards set the floor; states often add more on top.
Generally Accepted Government Auditing Standards
The core framework is the Generally Accepted Government Auditing Standards, called the Yellow Book, published by the U.S. Government Accountability Office. It applies to audits of all government organizations and entities that receive government funding.2U.S. Government Accountability Office. Yellow Book Government Auditing Standards GAGAS is stricter than private-sector auditing standards in one significant way. Auditors must report on internal controls and on compliance with laws and regulations every time, regardless of whether any problems turned up.3U.S. Government Accountability Office. Government Auditing Standards 2024 Revision In private-sector work, the auditor can often skip that reporting when nothing surfaces. Under GAGAS, it is mandatory.
The Single Audit Act
Any municipality that spends $1,000,000 or more in federal awards during a fiscal year must undergo a “single audit.”4eCFR. 2 CFR 200.501 – Audit Requirements The single audit combines the financial statement review with compliance testing of major federal programs into one engagement, sparing the municipality separate audits for each grant. The auditor decides which federal programs count as “major” using dollar thresholds and risk factors, then tests those programs against their specific requirements.5eCFR. 2 CFR 200.514 – Scope of Audit
Municipalities spending less than $1,000,000 in federal awards are exempt from the single audit requirement. Their records still have to be available if a federal agency wants to look.
State Requirements
State laws add another layer. Many states require annual audits regardless of federal funding or jurisdiction size. Some mandate a specific accounting basis, require particular reporting on local tax collections, or maintain lists of CPA firms approved to perform governmental audits. Submission deadlines vary but generally fall within a few months to nine months after the fiscal year ends.
Who Performs a Municipal Audit
Independence is the point. The people reviewing the books cannot be the same people who prepared them. Three types of auditors handle the work.
Most municipalities hire independent CPA firms for their external audit. The firm is typically selected by the legislative body, such as a city council or county commission, not by the finance department being audited. Firms performing government audits must participate in quality control programs, including peer review, to demonstrate they meet the professional standards this specialized work requires.
In some states, a state-level auditing office performs municipal audits directly. This is especially common for smaller jurisdictions that cannot easily afford a private firm. State auditors’ offices also frequently oversee the private firms operating within their state, reviewing completed reports for quality and compliance with standards.
Larger cities and counties may maintain internal audit departments staffed by government employees. These teams focus on continuous monitoring, testing controls throughout the year, and flagging operational inefficiencies. Internal auditors do not replace the external audit. The official opinion must come from an independent party, though the external auditor may rely on internal audit work when assessing risk.
How the Audit Process Works
A municipal audit follows a structured sequence built to focus attention where errors or misuse are most likely.
Planning and Materiality
The engagement begins with planning. The auditor learns the municipality’s operations, governance structure, major revenue sources, and financial environment, and identifies areas most likely to contain material misstatements — errors large enough to change a reasonable person’s view of the financial statements.
One of the auditor’s most important early judgments is setting the materiality threshold. This is a dollar amount, calculated during planning, that guides which accounts get tested, how extensively, and whether uncorrected errors are significant enough to affect the opinion. The calculation blends quantitative factors, like total revenues or expenditures, with qualitative considerations, like whether an error involves fraud or touches a politically sensitive program. That threshold shapes the entire audit.
Fieldwork
Fieldwork is where the audit team gathers evidence. Auditors pull samples of transactions and trace them from authorization through recording to verify accuracy. They test internal controls to see whether the municipality’s safeguards against fraud and error are actually working. The team physically inspects assets, confirms account balances with banks and other third parties, and interviews financial staff. In a single audit, the team also tests the municipality’s compliance with the requirements of each major federal program.
Review and Communication
Before the report is finalized, findings are discussed with municipal leadership so management can provide context or correct errors before anything goes public. The engagement partner reviews the full audit file to confirm it meets GAGAS and professional standards. A management letter often accompanies the report, describing less severe issues such as suggestions for improving operational efficiency or strengthening financial processes.
Reading a Municipal Audit Report
The audit opinion is the public-facing part of the work. Knowing how to read it separates informed oversight from trusting numbers on faith.
The Annual Comprehensive Financial Report
The audit opinion appears inside a larger document called the Annual Comprehensive Financial Report, or ACFR. The financial section opens with a Management’s Discussion and Analysis, a narrative overview where officials explain the year’s financial highlights in plain language.6Governmental Accounting Standards Board. Summary – Statement No. 34 Then come the basic financial statements: government-wide statements showing all assets, liabilities, and activities together, followed by fund financial statements that break the numbers out by individual funds, such as the general fund, special revenue funds, and enterprise funds. The independent auditor’s report, which contains the opinion, appears at the front of this section.
The Four Audit Opinions
The opinion is the bottom line. There are four possible outcomes.
- An unmodified or clean opinion means the financial statements are presented fairly in all material respects. This is what most municipalities receive.
- A qualified opinion means the statements are generally fair, but one specific area does not conform to GAAP or the auditor could not gather enough evidence to verify it.
- An adverse opinion means the financial statements are materially misstated and should not be relied upon. This outcome is rare.
- A disclaimer of opinion means the auditor could not perform enough work to form any opinion at all, usually because access to records or personnel was severely restricted.
Anything other than an unmodified opinion is a serious red flag. Bond rating agencies, state oversight bodies, and federal grantor agencies all watch the opinion closely, and a qualified or adverse result can directly affect borrowing costs and grant eligibility.
Findings and Corrective Action
The report often includes findings that describe specific problems with internal controls or compliance. In a single audit, these appear in the Schedule of Findings and Questioned Costs, which must identify significant deficiencies, material weaknesses, noncompliance with federal program requirements, and questioned costs exceeding $25,000 per compliance area.7eCFR. 2 CFR 200.516 – Audit Findings
When findings appear, the municipality has to respond. Federal regulations require the auditee to prepare a corrective action plan for each finding. The plan must name the person responsible, describe the corrective steps, and set an anticipated completion date.8eCFR. 2 CFR 200.511 – Audit Findings Follow-Up If the municipality disagrees with a finding, the plan must explain why. This gives findings real teeth: they are documented problems demanding a formal, trackable response, not observations to be filed away.
Where to Find a Municipal Audit Report
Municipal audit reports are public records. Most municipalities post their ACFR on the city or county website, usually under the finance department or city clerk page. State auditors’ offices also maintain online repositories where local government audit reports are centrally filed and searchable.
Municipalities that have issued bonds face an additional layer of disclosure. The Electronic Municipal Market Access system, known as EMMA, is designated by the SEC as the official source for municipal securities disclosure documents.9Municipal Securities Rulemaking Board. Continuing Disclosure Under SEC Rule 15c2-12, bond issuers generally agree to provide ongoing financial disclosures to the Municipal Securities Rulemaking Board, which publishes them on EMMA for free public access.
Single audit reports go to a separate federal repository. The Federal Audit Clearinghouse, at fac.gov, collects all single audit reporting packages and makes them publicly searchable.10Federal Audit Clearinghouse. The Federal Audit Clearinghouse The completed audit must be submitted within 30 days of receiving the auditor’s report or nine months after the fiscal year ends, whichever comes first.11eCFR. 2 CFR 200.512 – Report Submission Between the municipality’s own site, the state repository, EMMA, and the Federal Audit Clearinghouse, most residents have several ways to reach the audit without filing a records request.