Guiding Audit Supervisors in Understanding Key GAGIS Standards

Gain insight into key GAGAS standards and the audit supervisor’s essential responsibilities.

An audit supervisor plays a critical role in ensuring adherence to the Government Auditing Standards as outlined in the GAO Yellow Book, which serves as the fundamental framework for conducting high-quality audits of government entities. These standards mandate accountability, transparency, and integrity through rigorous criteria for auditor independence, competence, and reporting.

Key Insights

  • The Government Auditing Standards, known as GAGIS, require auditors to maintain independence, demonstrate professional judgment, and possess the necessary competence to address audit objectives.
  • Supervisors are responsible for providing guidance, direction, and on-the-job training to audit staff while ensuring compliance with applicable requirements and standards.
  • An audit organization must implement a system of quality management and undergo external peer reviews every three years to ensure adherence to professional standards and regulations.

This lesson is a preview from our Audit Leadership Certificate Program (includes software). Enroll in a course for detailed lessons, live instructor support, and project-based training.

The Generally Accepted Government Auditing Standards, commonly known as GAGAS, provide the foundational framework for conducting high-quality audits of government entities, programs, and recipients of federal awards. Published by the Government Accountability Office (GAO), the standards are also referred to as the Yellow Book.

GAGAS ensures accountability, transparency, and integrity by setting rigorous requirements for auditor independence, competence, and reporting. First issued in 1972, the Yellow Book is updated periodically to reflect changes in the auditing profession. The 2018 revision was a significant update, and the most recent update was issued in 2024.

An audit supervisor must be thoroughly familiar with these standards, as they apply to all levels of the audit organization and to every member of the audit team from top to bottom. While different levels of the organization carry different responsibilities under the standards, no one is exempt from them.

Three Core Questions the Standards Address

At their foundation, the GAGAS standards are organized around three broad questions:

  • Who does the audit?
  • How will the audit be performed?
  • What gets reported?

The standards can be stated concisely, but there is significant depth behind each one. Understanding that depth is essential for anyone in a supervisory role.

Ethical Principles (Paragraph 3.06)

GAGAS establishes the following ethical principles to guide the work of auditors conducting engagements under the standards:

  • Public interest
  • Integrity
  • Objectivity
  • Proper use of government information, resources, and positions
  • Professional behavior

These principles set the tone for how auditors are expected to approach their work and conduct themselves throughout every engagement.

Independence (Paragraphs 3.18 and 3.21)

In all matters relating to a GAGAS engagement, auditors and the audit organization must be independent from the audited entity. Independence comprises two components:

  • Independence of mind: The auditor's actual state of mind, free from influences that would compromise objectivity.
  • Independence in appearance: The avoidance of circumstances that would lead a reasonable and informed third party to question the auditor's objectivity.

Both components must be maintained throughout the engagement for the audit to meet GAGAS requirements.

Professional Judgment (Paragraph 3.109)

Auditors must use professional judgment in planning and conducting the engagement and in reporting the results. Professional judgment involves applying relevant knowledge and experience to make informed decisions throughout the audit process, including when determining the nature, timing, and extent of audit procedures.

Competence (Paragraph 4.02)

Audit organization management must assign auditors who, before beginning work on an engagement, collectively possess the competence needed to address the engagement objectives and perform their work in accordance with GAGAS. This is a collective requirement, meaning the team as a whole must have the necessary skills, even if no single individual covers every area of expertise required.

For supervisors, this standard has a direct practical implication: while a supervisor may not be responsible for hiring staff or making initial assignment decisions, he or she is responsible for developing the staff assigned to the engagement.

Continuing Professional Education (Paragraph 4.16)

Auditors who plan, direct, perform engagement procedures for, or report on an engagement conducted under GAGAS must complete at least 80 hours of continuing professional education (CPE) in every two-year period. This requirement ensures that auditors maintain and develop their professional competence on an ongoing basis.

System of Quality Management (Paragraphs 5.02 and 5.179)

The objective of a system of quality management is to provide the audit organization with reasonable assurance that it and its personnel fulfill their responsibilities in accordance with professional standards, applicable laws and regulations, and the requirements of GAGAS engagements.

As part of this system, audit organizations are required to obtain an external peer review at least once every three years. That review must be conducted by reviewers who are independent of the audit organization being reviewed (paragraph 5.155). The external peer review process serves as an outside check on whether the organization's quality management system is functioning effectively.

Fieldwork Standards: Supervision

The Supervision Requirement (Paragraph 8.87)

Auditors must properly supervise audit staff. This is a direct and non-delegable obligation under GAGAS fieldwork standards.

What Supervision Involves (Paragraphs 8.88 and 8.89)

Audit supervision involves:

  • Providing sufficient guidance and direction to auditors assigned to the audit to address the audit objectives and follow applicable requirements
  • Staying informed about significant problems encountered during the engagement
  • Reviewing the work performed
  • Providing effective on-the-job training

The nature and extent of supervision and work review may vary based on factors such as the size of the audit organization, the significance of the work, and the experience level of the auditors involved. A more experienced team working on a routine engagement may require less intensive oversight than a newer team working on a high-risk or complex audit.

Evidence (Paragraph 8.90)

Auditors must obtain sufficient appropriate evidence to provide a reasonable basis for addressing the audit objectives and supporting their findings and conclusions. The sufficiency and appropriateness of evidence is a matter of professional judgment, and supervisors play a key role in evaluating whether the evidence gathered by the team meets this standard before the engagement is finalized.

Audit Documentation (Paragraph 8.132)

Auditors must prepare audit documentation related to planning, conducting, and reporting for each audit. Proper documentation supports the findings and conclusions, enables supervisory review, and provides the evidence trail needed if the audit is subject to external review or legal scrutiny. Documentation requirements apply throughout the engagement, not just at the reporting stage.

photo of Penny Popps

Penny Popps

Penny N. Popps recently joined the Graduate School USA instructor team in early 2025, teaching in the area of Audit. She is an exceptional leader with over 20 years of private and public sector experience in accounting, audit, compliance, risk management, fraud, and internal controls. A recipient of numerous public service, recognition, and performance awards, she is committed to developing the next generation of financial management and audit professionals.

During her nearly 15 years as a Federal Government Public Servant, Penny held several pivotal transformational leadership roles, including serving as the first Fraud Risk Manager at the U.S. Small Business Administration (SBA), where she successfully helped mature its Fraud Risk Management Program.

She holds a B.B.A. in Accounting from the University of Texas at Arlington, an MBA from Texas Woman’s University, an Advanced Technical Certificate in Professional Accountancy from Dallas College, and multiple professional credentials, including Certified Fraud Examiner (CFE), Certified Internal Controls Auditor (CICA), Department of Defense Financial Management Certification, and an ICF Associate Certified Coach (ACC) Certification.

Prior to her tenure at SBA, Penny spent more than six years at the Department of Housing and Urban Development (HUD), managing projects that advanced the delivery of affordable, safe, and decent housing while safeguarding HUD programs from fraud, waste, and abuse. She led multiple audit teams in conducting complex quality control reviews of independent public accounting firms, CIGIE reviews, financial assessments, staffing studies, and annual OMB A-123 risk assessment reviews for the Accountability, Integrity, & Risk (AIR) Program.

During her federal career, Penny also served as the Branch Chief of Financial Reporting at the DHS ICE OCFO, Office of FM–Financial Service Center. She oversaw the operations of the Payroll and Fund Balance with Treasury Units for all DHS ICE components, which processed approximately $5.2 billion in payroll transactions and reconciled $10.1 billion in cash transactions, significantly improving financial management operations.

She also led and supervised audit teams at the Defense Contract Audit Agency (DCAA), recovering millions in questioned costs from contractors. In state government, she recovered millions in sales and use tax dollars owed to the Texas State Comptroller of Public Accounts, ensuring taxpayer funds were used responsibly and efficiently.

Penny’s private-sector experience includes helping build successful internal audit divisions at major corporations such as Essilor Group and Fossil Group. Throughout her career, she has continued to expand her expertise while paying it forward by mentoring, coaching, and training professionals entering the accounting, audit, compliance, risk management, fraud, and internal controls fields.

Deeply committed to service, Penny is passionate about her philanthropic and volunteer work, especially with Alpha Kappa Alpha Sorority, Inc. and the Junior League of Washington. Her mission is to provide service to all mankind throughout her career, retirement, and life. She currently resides in Alexandria, VA, and enjoys spending her leisure time reading.

More articles by Penny Popps

How to Learn Auditing

Build practical, career-focused federal auditing skills through hands-on training designed for beginners and professionals alike. Learn fundamental tools and workflows that prepare you for real-world projects or industry certification.