Internal and Forensic Audit · Special Points relating to Internal Audit in various Entities

Internal Audit in Government and Non-Profit Entities

Updated 11 October 2026 · Fact-checked

Internal audit in government and non-profit entities checks whether public or donor money is used lawfully, economically and for the stated purpose. It goes beyond accuracy of books. You test compliance with rules, sanctions, trust deeds and grant terms, and you report on value for money and governance.

Understand Internal Audit in Government and Non-Profit Entities

A company's internal audit mainly supports profit, risk and shareholder protection. Government bodies and non-profits work differently. They hold public money or donor money, and success is measured by service delivery, not profit. So the audit focus shifts from profit to propriety, compliance and purpose.

In government departments, money is spent only under legislative authority, budget grants and sanction orders. Rules such as financial rules, delegation of powers and procurement rules govern each spend. The internal auditor checks that expenditure had proper sanction, was within budget, followed the rules and was correctly recorded. This is separate from the constitutional external audit by the Comptroller and Auditor General (CAG). Internal audit is the management's own check, done during the year.

In public sector undertakings (PSUs), the entity is a company or corporation, so company law, internal control and the audit committee also apply. But it also serves public policy goals. The internal auditor therefore looks at commercial efficiency, compliance with government guidelines, procurement transparency, project cost and time overruns, and economy, efficiency and effectiveness (the 3 Es). The statutory auditor of a government company is appointed on the CAG's advice, and the CAG has supplementary audit powers.

In NGOs and charitable trusts, the governing documents matter most: the trust deed, society memorandum or company's Section 8 licence and articles. The internal auditor checks that funds are applied only for the stated objects, that restricted grants are used as the donor required, that registrations and tax-exemption conditions are kept, and that utilisation certificates and reports to donors are accurate. Also check foreign contribution receipts, where applicable, are kept and used as the law requires.

Across all these entities, you should audit purpose, authority, controls and reporting. Ask four questions: Was there authority? Was the rule followed? Was the money used for the intended purpose? Was value obtained?

Key rules to remember

Core audit focus: Authority + Compliance + Purpose + Value for money; Use as a checklist for any government or non-profit audit question.
The 3 Es: Economy, Efficiency, Effectiveness; Economy is low cost for given quality. Efficiency is output per unit of input. Effectiveness is achieving the intended objective.
Propriety test for expenditure: Budget provision + Competent sanction + Rule compliance + Proper record; If any one is missing, the expenditure is irregular even if the work was done.
NGO fund application test: Fund used only for objects in governing document and within donor restrictions; Check restricted and unrestricted funds separately.

How to solve Internal Audit in Government and Non-Profit Entities questions

Use this method for any case question on internal audit in a government or non-profit entity.

1Identify the type of entity: department, PSU, trust, society or Section 8 company. This decides the governing rules.
2List the sources of authority: budget, financial rules, delegation of powers, trust deed, grant agreement or applicable statute.
3State the audit objectives: compliance, propriety, safeguarding of assets, accuracy of records and value for money.
4Apply the facts: compare each fact in the case with the rule or sanction and spot the deviation.
5Name the risk created, such as misuse of funds, loss of exemption, weak procurement or irregular expenditure.
6Recommend specific controls or corrective action, such as sanction before spend, tendering, separate fund accounts or board approval.
7Conclude with the reporting line: to the head of the department, board, audit committee or trustees, with follow-up.

Quickest way: Four-question check

When to use it: When time is short and the question gives a short fact pattern.

Write the entity type in one line.
Ask: was there authority? Was the rule followed? Was the purpose met? Was value obtained?
Answer each in one or two lines using the facts.
End with one recommendation and the report recipient.

Common mistakes in Internal Audit in Government and Non-Profit Entities

Treating government internal audit like a commercial audit focused on profit.
Most study time goes to company audits.
Fix: Shift the focus to sanction, rules, purpose and the 3 Es.
Confusing internal audit with the CAG's audit.
Both examine public spending.
Fix: Remember internal audit is a management function during the year. The CAG audit is independent, external and constitutional.
Ignoring the trust deed or grant terms in an NGO question.
Students look only at the accounts.
Fix: Begin with the governing document and donor conditions, then test the spending against them.
Saying expenditure is fine because the work was actually done.
Students focus on substance and forget authority.
Fix: Expenditure without proper sanction or budget is irregular even if the benefit was real.
Mixing restricted and unrestricted funds.
Non-profit accounting is less familiar.
Fix: Recommend separate tracking and check that restricted grants are used only for the stated purpose.
Giving generic recommendations such as 'improve controls'.
Students run short of time.
Fix: Name the control: tender process, segregation of duties, utilisation certificates, board approval.

Worked examples

Example 1

A state government department purchased equipment worth ₹18,00,000 without inviting tenders. The sanction was issued by an officer whose delegated limit is ₹10,00,000. As internal auditor, what do you report?

Show the solution

Entity: government department, so expenditure rules and delegation of powers apply.
Authority: the officer's limit is ₹10,00,000, but the sanction was ₹18,00,000. The excess of ₹8,00,000 is beyond his power.
Compliance: no tender was invited, so procurement rules on competition and transparency were not followed.
Risk: higher price, favouritism and irregular expenditure that may draw external audit objection.
Recommendation: refer for ratification by the competent authority, fix responsibility, and enforce tender and delegation checks before payment.
Report to the head of the department.

Answer: Report the purchase as irregular for lack of competent sanction and tendering, recommend ratification by the competent authority and strengthen pre-payment checks.

Example 2

A charitable trust received a grant of ₹5,00,000 from a donor for a school-books programme. The trust spent ₹1,50,000 of it on staff salaries for its general office. How should the internal auditor treat this?

Show the solution

Entity: charitable trust, so the trust deed and grant terms govern.
The grant was restricted to school books, so only that purpose is permitted.
Amount applied outside the purpose is ₹1,50,000. The amount properly available for the programme is ₹5,00,000 − ₹1,50,000 = ₹3,50,000.
Risk: breach of donor condition, refund demand, loss of donor trust and a possible issue with exemption conditions.
Recommendation: restore ₹1,50,000 to the programme fund or get written donor approval, keep separate records for restricted funds, and ensure the utilisation certificate reflects actual use.
Report to the trustees.

Answer: The ₹1,50,000 spend is a misapplication of restricted funds. Reverse it or obtain donor consent, and report to the trustees with stronger fund-tracking controls.

Exam tips

Start every answer by naming the entity type and its governing rules.
Use the 3 Es and propriety terms to show you know the difference from commercial audit.
Always give a specific control as your recommendation and name who receives the report.
Keep the CAG and internal audit distinct, and state this in one clear line when relevant.
Do not quote section numbers or rules unless you are sure of them.

Practice questions from Special Points relating to Internal Audit in various Entities

Internal Audit in Government and Non-Profit Entities in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Internal Audit in Government and Non-Profit Entities: frequently asked questions

How is internal audit in government different from a company?

It focuses on authority, compliance with financial rules, propriety and value for money rather than profit. Spending must follow budget and sanction. The audit reports to the department head or similar authority.

Is internal audit the same as CAG audit?

No. Internal audit is a management tool carried out during the year. The CAG's audit is an independent external audit of public accounts and government companies.

What does an internal auditor check in an NGO?

You check that funds are used for the objects in the governing document and within donor conditions. You also check registrations, fund records, utilisation certificates and donor reporting.

What are the 3 Es in public sector audit?

They are economy, efficiency and effectiveness. Together they test whether resources were bought at low cost, used well and achieved the intended results.