The most common type of audit is the correspondence (mail) audit, representing roughly 75-77% of all IRS audits. These are routine, automated checks where the IRS requests documentation via mail to verify specific items like deductions or credits. For financial reporting, the most common report is an unqualified ("clean") opinion.
Operational. Sometimes called program or performance audits, these are the most common audits. Operating procedures, flow of paperwork, and internal controls are thoroughly reviewed.
Audits are categorized into the following common areas:
Unqualified (clean) audit report
An unqualified opinion is considered a clean report. This is the type of report that auditors give most often. It is also the type of audit report that most companies expect to receive.
The three main types of audits, focusing on who performs them, are Internal Audits (by employees for improvement), External Audits (by independent CPAs for stakeholders), and Government Audits/IRS Audits (by tax authorities). Alternatively, focusing on the purpose, they can be categorized as Financial Audits (financial statements), Compliance Audits (rules/regulations), and Operational Audits (efficiency/effectiveness).
“The Big 4” refers to the four largest accounting and auditing firms in the world, which bring in billions in revenue. Ranked by 2020 revenue figures, the Big 4 are Deloitte LLP (Deloitte), PricewaterhouseCoopers (PwC), Ernst & Young (EY) and Klynveld Peat Marwick Goerdeler (KPMG), respectively.
1) Correspondence Audit
The first of the four types of tax audits are correspondence audits are the most common type of IRS audits. In fact, they comprise roughly 75% of all IRS audits.
A successful internal audit function relies on four fundamental pillars, often referred to as the “4 C's”: Competence, Confidentiality, Communication, and Collaboration. These principles guide auditors in delivering meaningful and impactful results. Let's explore each of these elements in detail.
Big Five
Balancing the 3 C's in Auditing Practice
Balancing competence, confidentiality, and communication is essential for the effectiveness of the auditing process.
What are audit procedures?
The Big 4 are the largest accounting and auditing firms in the world: Deloitte LLP (Deloitte), PricewaterhouseCoopers (PwC), Ernst & Young (EY) and Klynveld Peat Marwick Goerdeler (KPMG).
Types of Audits
The 5 Cs of audit (Criteria, Condition, Cause, Consequence, Corrective Action) are a framework for structuring clear, actionable audit findings, explaining what should be (Criteria), what is found (Condition), why it happened (Cause), what the impact is (Consequence/Effect), and how to fix it (Corrective Action/Recommendation) to drive organizational improvement and compliance.
The IRS conducts audits by mail or in person. Audits by mail are called “correspondence audits” because they involve document shuffles back and forth between the taxpayer and examiner. Most of the audits conducted by the IRS are correspondence audits. In 2024, 77 percent of audits were by mail.
The three main types of audits, focusing on who performs them, are Internal Audits (by employees for improvement), External Audits (by independent CPAs for stakeholders), and Government Audits/IRS Audits (by tax authorities). Alternatively, focusing on the purpose, they can be categorized as Financial Audits (financial statements), Compliance Audits (rules/regulations), and Operational Audits (efficiency/effectiveness).
Fundamental Principles Governing an Audit:
The Audit Bureau of Circulations (ABC) of India is a non-profit circulation-audit organisation. It certifies and audits the circulations of major publications, including newspapers and magazines in India.
Financial audit
Financial audits are one of the common types of audit. All businesses that are publicly held must get a financial audit conducted. A financial audit is performed to ensure that the information revealed in the financial statements is correct.
The four common types of auditors are Internal Auditors (evaluate company operations for management), External Auditors (independent review of financial statements for outside parties), Government Auditors (ensure compliance with laws for public agencies like the IRS), and Forensic Auditors (investigate financial fraud for legal proceedings). These roles focus on different areas, from internal controls and risk management to financial reporting accuracy and fraud detection.
What is SOC 2 Type 1? SOC 2 Type 1 compliance evaluates an organization's cybersecurity controls at a single point in time. The goal is to determine whether the internal controls put in place to safeguard customer data are sufficient and designed correctly.
Types of Internal audits include compliance audits, operational audits, financial audits, and an information technology audits.
KPMG Clara – our global audit platform
KPMG Clara analytics (KCa) equips our auditors with a suite of powerful tools to perform in-depth, data-driven audits.