ITtoolkit Article Collection

Project Audits: Verify Compliance and Validate Performance

Read more in the full article below.

Project management audits are rarely welcome and often contentious, but when done correctly, they offer unparalleled opportunity to learn from mistakes and rescue troubled projects.  Like every other sensitive management process, success depends on planning, execution and communication.  Read on to learn more about it.

What is project auditing? Project auditing is a formal type of "project review", most often designed to evaluate the extent to which project management standards are being followed.  Audits are typically performed by a designated audit department, the "Project Management Office", an empowered Steering Committee or an external auditor.  The audit "entity" must have the designated authority to conduct the audit and make related recommendations.

Going beyond practice verification, project audits are also performed as a "check and balance" to evaluate project quality, necessity, value, and to examine the root cause of known project problems and reported failures.  In order to meet these varied uses, audit scope may vary based on type, purpose and timing. Verification audits are pre-planned, with the "subject project" selected according to established criteria.  On the other hand, quality assurance and problem response audits are initiated in response to the pressing needs of a troubled project, and in that sense, the project "selects itself". 

Also Read:  Planning for the IT Operations Audit

Whatever the driving force may be, project audits should follow standardized guidelines, to ensure that they are properly planned, executed fairly, and that all announced results and recommendations are given appropriate weight and deserved credibility.  The audit is a tool, and like any other tool, proper usage is the key to effective results.

4 Keys to Project Audit Planning

Every effective audit operation will be defined by four (4) key characteristics - alignment, independence, transparency and institutional support. Reality dictates that audits will never be welcome, and audit staff will always be looked upon with skepticism. Can they be truly independent? Why are they always picking on me? How can I get this project done with all these interruptions? These are the natural thoughts that come with external scrutiny and it's quite understandable. Negative audit results, particularly as part of a pattern, can damage one's career, or even bring about dismissal in more extreme cases.

On balance, audits are essential, and legally imperative. But just having audit capability is not enough. Audit staff must be able to cut through the fear, negativity and skepticism to bring about positive results. The only way to achieve this is to empower auditors to do their job, and allow project managers to share in the audit process through training, communication and feedback.

Get an illustrated view of the project review and lessons learned process in our informative infographic: The Road to Continuous Improvement.

Audit Policies and Activation Procedures

What will it take to make project auditing a standard part of your approach to managing successful projects? To realize expected benefits, every step, element and deliverable of the audit process must be clearly defined and openly communicated, including:

  • Auditing Mission Statement. The audit organization mission statement must clearly define the goals, objectives, authority, and boundaries of the audit operation, as well as the type of audits to be conducted.
  • Audit Skills Specification.  A detailed specification of auditor skills and experience, demonstrating that audit staff have sufficient expertise in project review, project standards, and if required, technical experience with the project subject matter.
  • Stakeholder Roles and Responsibilities. A detailed specification of all audit related roles and responsibilities, for both audit staff and project staff (to include project managers, team members, project sponsors, customers and other stakeholders as needed). 
  • Audit "Trigger" Criteria. A full listing of all criteria by which projects will be selected for an audit. You cannot audit every project - it would be too costly and time consuming, defeating the purpose of the audit process itself.  Specific criteria should be established to identify projects for auditing according to risk, complexity, internal value, cost, and the past "record of results" of the performing organization.
  • Audit Initiation Procedures. A detailing specification of audit initiation procedures, including the process by which individual project managers are notified of a pending audit and related preparation requirements.
  • Audit Execution Procedures. A full listing of audit execution procedures, covering the methods and procedures to be employed during the audit itself. Audit procedures mat vary based upon the type and timing of any given audit but can include, personal interviews with project staff, review of documents, questionnaires, and other related techniques.
  • Audit Reporting Procedures.  A complete specification of audit reporting procedures, covering the manner and method by which audit results will be reported and reviewed. In order to minimize the threatening nature of the project audit, all parties should be fully aware of how results will be reported and used within the organization.
  • Audit Appeal Procedures.  A full specification of all procedures to be followed to appeal and/or challenge reported audit results.

Realizing Audit Goals Through Planned Action

The goal of the standardized audit process is to provide pre-defined practices to be adapted and applied as needed to multiple "audit situations" (projects).  To realize all of the intended benefits, related practices must incorporate the elements listed above, organized into executable steps and structured into a defined timeline.  To succeed, you must have access to sufficient resources, have sufficient time to plan and act, have sufficient management support, and sufficient cooperation from all stakeholders involved.

Above all, effective auditing practices depend upon open and honest communication - to provide the "informational" basis for the audit and to set expectations for what will happen, when and how.  When the stage is set is correctly, audits bring clarity and structure to the “project management process”, which in the end, can only help the overworked project manager. The goal of the auditor and the project manager should be one and the same - to continuously improve project results and performance.  Further, it is important to "keep an open mind". 

When one or more projects "fail" to pass an audit, that is not necessarily the fault of the project manager or the team.  Perhaps project management standards are not suitably sized and scaled to project or organizational needs?  Perhaps insufficient training or lack of communication of standards is a root cause?  Above all, auditing needs to take a global perspective and examine all variables to make the most effective judgements and recommendations.

About Us- has been around since 2001.  What will you find here?  We have articles (covering a wide range of topics relating to our IT service strategy and project fast tracking methodologies).  We have templates and whitepapers to download.  We have our series of IT management infographics.  And, we have our "Toolkit productivity packages", combining "education and execution" - with time-saving concepts, steps and templates packaged in digital downloads.  Our current Toolkit offerings include the Fast Track Project Toolkit and IT Service Strategy Toolkit.

Subscribe to the ITtoolkit newsletter for the latest articles and updates.

See the latest in our collection of IT Management Infographics. Visualize I.T.!

Fast tracking steps and tools

If you're ready to make "fast tracking" part of your project management skill set, there's no easier way than the Fast Track Project Toolkit. Available for download at our companion web site

The IT Service Strategy Story

Have you downloaded your copy of the IT Service Strategy Toolkit?

The IT Service Strategy Toolkit is the tried and true way to deliver "value-added IT" and achieve superhero status. It's filled with steps, templates, guidance, and it's ready for download right here at