How to Write Action-Oriented Audit Reports

Most variance analysis is wasted effort because it stops one step too early. Teams identify what changed. They explain why it happened. Then they submit the report. And leadership can't do anything with it. I've trained over 1,000 finance professionals at companies like Google, Merck, and Lowe's. The pattern is the same everywhere: Teams nail the What and the Why. But they skip the So What — the part that actually drives decisions. Here's how to fix it: 𝗦𝘁𝗲𝗽 𝟭: 𝗧𝗵𝗲 𝗪𝗵𝗮𝘁 Identify and quantify the variance. Be specific. "Professional fees are unfavorable by $251K" — not "costs increased." 𝗦𝘁𝗲𝗽 𝟮: 𝗧𝗵𝗲 𝗪𝗵𝘆 Find the root cause. Apply the 80/20 rule. If Deloitte is $267K over budget and the total variance is $251K, don't waste time tracking down the $16K offset. Focus on what matters. 𝗦𝘁𝗲𝗽 𝟯: 𝗧𝗵𝗲 𝗦𝗼 𝗪𝗵𝗮𝘁 This is where most teams fail — and where real impact happens. Bad: "Professional fees are up because of Deloitte." Good: "Deloitte raised their prices (not more hours). We should compare to other audit firms and consider a tender process." Notice the difference? One describes. The other recommends action. To find the So What, I use the ARCTIC framework: • 𝗔ctions — What should we do next? • 𝗥isks/Opportunities — Does this expose a risk or upside? • 𝗖ause — What's the real root cause? • 𝗧iming — Is this a timing shift or a real hit? • 𝗜mpact — How does this affect the forecast? • 𝗖ontrol — Is this inside or outside our control? When you standardize this across your team, leaders don't have to re-learn how to read each report. They know exactly where to find the variance, the why, and the recommended action. That's how you turn backward-looking commentary into forward-looking decision support. I break down the full framework in my new YouTube video. 👉 Watch the full breakdown here: https://lnkd.in/dsbZChME -Christian Wattig Director, Wharton FP&A Program Corporate Trainer, Inside FP&A

Internal Audit Report Writing & The Minto Pyramid Principle One of the most powerful tools I’ve used over the past 8 years is the Minto Pyramid Principle—a structured thinking and writing approach developed by Barbara Minto at McKinsey. Here’s how it applies beautifully to internal audit reporting: - Top of the Pyramid – Start with the conclusion > Clear, action-oriented IA recommendations. * “Perform monthly reconciliation ...” - Middle Layer – Support with key arguments > These are IA observations and their root causes. * High aging of balances, umatched balances - Bottom Layer – Back it up with data to add credibility to the arguments > Evidence from sample testing, data analytics, or control walkthroughs. * 30% of balances > 365 days Why this works? - It forces auditors to think clearly, not just write clearly. - Avoids vague phrases like “strengthen the process” or “lack of controls”. - Drives action with precise expectations. Start every recommendation with a verb. E.g., “Implement a formal maker-checker for…” or “Restrict access to…” Structured thinking = Clear communication = Stronger impact. #InternalAudit #AuditReporting #StructuredThinking #MintoPyramid #RiskManagement #IAExcellence #DataDrivenAudit #AuditTips #LeadershipInAudit

𝗕𝗲𝗶𝗻𝗴 𝗰𝗼𝗿𝗿𝗲𝗰𝘁 𝗱𝗼𝗲𝘀𝗻’𝘁 𝗺𝗲𝗮𝗻 𝘆𝗼𝘂’𝗿𝗲 𝗰𝗼𝗺𝗽𝗲𝗹𝗹𝗶𝗻𝗴. Being right used to feel like enough. “Here are the facts. Do what you will.” But it turns out… facts alone don’t drive decisions. Auditors know how to be accurate. We collect the evidence. We write the findings. We check all the boxes. And then… The report goes unread. The recommendations sit untouched. The risk remains. 𝗪𝗵𝘆? Because being 𝘤𝘰𝘳𝘳𝘦𝘤𝘵 is not the same as being 𝘩𝘦𝘢𝘳𝘥. I've seen findings that were: ✅ Thoroughly supported ✅ Technically accurate ❌ Completely ignored Not because they were wrong— but because they lacked tone, context, and urgency. They were factual but forgettable. And in auditing, that’s a problem. 𝗦𝗼 𝘄𝗵𝗮𝘁’𝘀 𝘁𝗵𝗲 𝗳𝗶𝘅? We stop writing for perfection, and start writing for 𝗶𝗺𝗽𝗮𝗰𝘁. • 𝗜 – Include tone that reflects importance • 𝗠 – Make the message relatable • 𝗣 – Prioritize what matters most • 𝗔 – Add human context (not just data) • 𝗖 – Clarify the risk’s urgency • 𝗧 – Tie it to decisions leadership must make    Your job isn’t just to point out risk. It’s to influence action. So yes—be correct. But make sure you’re compelling too. 💬 Auditors: Have you ever communicated a finding that got ignored until you communicated it with more impact? What changed?