What a supreme audit institution does
- Standard setter
- International Organization of Supreme Audit Institutions
- Core standard
- ISSAI 100, Fundamental Principles of Public-Sector Auditing
- Common forms
- Auditor-general, national audit office, court of accounts or chamber
- Main audit types
- Financial, compliance and performance audit
- Last checked
- 19 October 2026
The basic definition
INTOSAI defines a supreme audit institution, or SAI, as the public body exercising the highest public-sector audit function of a state or supranational organisation. It says SAIs work independently and objectively, subject to their mandates and legal systems 1.
The name does not decide the powers. An auditor-general may report to Parliament. A court of accounts may issue judgments or financial orders under national law. Readers must check the institution's own statute and the report's stated scope.
The three main audit types
ISSAI 100 sets principles for public-sector audits and describes the subject, criteria, responsible party and intended users. It identifies financial, compliance and performance work within the public audit framework 2.
A financial audit asks whether statements meet the reporting framework. A compliance audit tests activity against law or rules. A performance audit examines economy, efficiency or effectiveness. One report can contain more than one type.
Why independence matters
A national audit body needs authority to choose or carry out work, obtain evidence and report without improper direction. The exact safeguards come from each legal system. INTOSAI treats independence, ethics, professional judgment, quality control and documentation as general audit principles 2.
Independence does not remove accountability. Audit offices publish methods, undergo quality processes and report to legislatures or the public under their governing rules.
What happens after a report
The audit body may ask the audited institution to respond before publication. A report can then go to Parliament, a public accounts committee, a ministry or another authority. Recommendations may be accepted, rejected or partly accepted.
Follow-up can come through an audit recommendation tracker, a later audit, committee hearings, an official action plan or a court case. The body with power to enforce a result differs by country. ISSAI 100 includes reporting and follow-up among audit process principles 2.
What an audit does not prove
An adverse audit finding does not by itself prove a crime. Auditors apply audit criteria and evidence rules. Prosecutors and courts apply criminal law and court procedure. A report may be referred for investigation, but the later body's decision must be reported separately.
The reverse matters too. If no charge follows, the audit finding does not vanish. Record the audit, the response and the later outcome with their dates.
How to identify the right institution
Start with the constitution, audit act or official government directory. Confirm that the institution is the national or supranational top audit body, then use its own report library. INTOSAI publishes a member directory for its SAI network 3.
For a public contract, search the relevant audit office first, then the audited body's response, Parliament, later audits and courts. Do not substitute an advocacy dossier or an unsourced summary for the report.
Common questions
Is every auditor-general a supreme audit institution?
A national auditor-general often leads the SAI, but the legal structure must be checked in that country 1.
Can a SAI convict someone?
Most audit offices cannot convict anyone. Some courts of accounts have judicial powers under national law, so check the mandate.
Are audit recommendations binding?
It depends on national law and the recommendation. Many rely on management action and parliamentary follow-up.
Where can I find the national audit office?
Use the INTOSAI member directory, then confirm the office and its report library on the official domain 3.
Audit cases move on. Each page shows the date we last checked it. Spotted an error or a newer official record? Email [email protected] with the official link.
Sources
- INTOSAI: overview and definition of a supreme audit institution (updated December 2022)
- INTOSAI Framework: ISSAI 100, Fundamental Principles of Public-Sector Auditing (2019 edition)
- INTOSAI: member supreme audit institutions directory (checked 19 October 2026)
Related
- How to read a public audit report
A guide to the parts of a public audit report: scope, criteria, findings, management response, recommendations, audit opinions and management letters.
- What happens after a government audit: the stages from report to outcome
The stages after a public audit report: management response, public accounts hearings, tracking, follow-up audits, referrals, recovery and courts.
- ArriveCAN audit: findings, responses and where the case stands
The Auditor General audited ArriveCAN in February 2024. What followed: Parliament, the procurement ombud, the RCMP and the GC Strategies ban.
- EU border information systems audit: findings and follow-up
The ECA audited EU border information systems in 2019. The record now includes Parliament scrutiny and the Entry/Exit System rollout.
- Qualified vs adverse audit opinions
A plain guide to qualified and adverse audit opinions, scope limits, material misstatements and why performance audits use different conclusions.
- Special audits explained
What a special audit is, who can request one, how its scope differs from annual audit work and what happens after publication.
- How public accounts committees work
How parliamentary public accounts committees use audit reports, take evidence, publish recommendations and obtain government responses.
- How to find an audit report by country
Start with the national audit office, then check its report archive, parliament and follow-up records using this official-source directory.