Skip to content

Audit Finding

What is Audit Finding?

The results of evaluating collected audit evidence against audit criteria. Findings can indicate conformity or nonconformity with the criteria and may include observations or opportunities for improvement.

Audit

What the standards actually require on audit finding

Requirements naming audit finding across 6 standards, quoted from the control text.

ISO 19011:20263 controls

Findings are reached by weighing the audit evidence against the criteria, and they may show either conformity or nonconformity. Where the audit plan calls for it, individual findings should cover conformity and good practice together with the evidence for them...

iso-19011-2026::6.4.8 · Generating the audit findings →

Risk assessment II: the organisation has a methodology to identify, analyse and address the particular risks it identifies, updating the assessment for the conduct and root causes of apparent violations or systemic deficiencies found, for example through testi...

us-ofac-sanctions-compliance-framework::RA.II · Use a documented methodology to identify, analyse and address risks, updated from testing and audit findings →

Guidance: the evidence gathered should be assessed against the criteria so that findings can be reached, which can indicate conformity or nonconformity and, when the plan specifies, conformity and good practice with supporting evidence, improvement opportuniti...

iso-19011-2018::6.4.8 · Generating audit findings →

ISO 19011:2018, 6.4.8 is followed with nothing added: evidence is evaluated against the criteria to determine findings of conformity or nonconformity (and, where the plan specifies, good practice, improvement opportunities and recommendations), nonconformities...

iso-iec-27007-2020::6.4.8 · Generating audit findings →
ISO 37101:20162 controls

At planned intervals top management must review the management system, for example with interested parties taking part, to make sure it stays suitable, adequate and effective.

iso-37101-2016::9.3 · Management review →

Questions people ask about audit finding

What is Audit Finding?
The results of evaluating collected audit evidence against audit criteria. Findings can indicate conformity or nonconformity with the criteria and may include observations or opportunities for improvement.
Why is Audit Finding important for compliance?
Audit Finding is a key concept in Audit. Understanding audit finding helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,049 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Audit Finding?
Audit Finding appears in the requirement text of ISO 19011:2026, US OFAC Sanctions Compliance Framework, ISO 19011:2018, ISO 30414:2018 - Human Resource Management: Guidelines for Internal and External Human Capital Reporting, ISO/IEC 27007:2020. Across these standards we have identified 11 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Audit Finding?
Explore our compliance framework pages to see how audit finding applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,049 frameworks.

See how Audit Finding applies across compliance frameworks

Our platform maps 1,049 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.