Does retroactive documentation count as valid audit evidence?
Our operations team created a policy memo and approval checklist only after audit requested support. The manager now wants us to use those documents as evidence that the required control was in place during the review period. Is that acceptable?
Not as historical operating evidence.
Retroactive documentation may be useful in two legitimate ways:
- it can help explain the intended future-state process
- it can support that remediation has started
It does not prove that the control actually operated during the historical period under review unless you also have contemporaneous evidence from that period.
The clean report treatment is:
- describe the historical deficiency based on the missing contemporaneous support
- describe the new document as corrective action in progress
- plan follow-up testing later to determine whether the new process is operating effectively
That approach protects report integrity without ignoring management's remediation effort.
Master Part 2 with our CIA Course
45 lessons · 90+ hours· Expert instruction
Related Questions
What should an auditor do if a supervisor weakens a supported finding?
How should auditors prepare for a technical exit meeting?
When should audit quality concerns be escalated beyond the engagement team?
How does business knowledge affect internal audit quality?
Where should an auditor begin a full-company internal control audit?
Related Articles
Join the Discussion
Ask questions and get expert answers.