A hospital internal audit focuses on the places where revenue is created and can leak: billing, pharmacy, consumables, insurance claims and cash collection. It also looks at purchases, assets, doctor payments and compliance with accreditation and licences.
Last reviewed: 17 October 2026. Facts checked. We searched for typical hospital internal audit areas in India and for the NABH hospital standards. The audit areas come from consultancy and job-posting sources, which we treat as indicative only. We confirmed that NABH has a 6th edition of its hospital standards effective January 2025, from its portal listing, but did not open the standards. We could not verify any claim that NABH requires internal audits on a fixed schedule, so we make none.
Why hospitals need a tailored audit
A hospital is many businesses under one roof: a service provider, a pharmacy, a lab, a canteen, sometimes a medical college. Most revenue is created outside the finance team, at the point of care. Bills are built from many small charges, and many people can add or change them.
That means the audit must follow the patient journey, not just the ledger.
The patient-to-cash journey
| Stage | What can go wrong |
|---|---|
| Registration and admission | Wrong patient category, duplicate records |
| Treatment and orders | Services given but not billed |
| Billing | Wrong tariff, unapproved discounts, missed charges |
| Insurance and TPA | Claim rejections, delays, short settlements |
| Collection | Cash not deposited, refunds without approval |
| Discharge | Bills altered after discharge |
Walk one admission through each step and test the controls on the way.
Revenue and billing tests
- Compare services ordered (lab, radiology, theatre, room) with charges in the final bill, for a sample of patients.
- Test that tariffs in the billing system match the approved rate card.
- Review discounts and concessions. Who approved them and under which policy?
- Look at bills edited or cancelled after discharge.
- Check packages: were extras billed on top of a package price against policy?
- Reconcile collections by counter and by day with bank deposits.
- Test refunds and advance adjustments for approval and evidence.
Insurance and TPA claims
- Compare claims raised, approved, rejected and settled.
- Age the outstanding amounts by insurer or TPA.
- Review reasons for rejection. Are there patterns such as missing documents?
- Check that write-offs are approved.
Pharmacy and consumables
Pharmacy and medical stock are common high-risk areas.
- Do physical stock counts match the system?
- Review expiry and slow-moving items. Are they tracked and disposed of properly?
- Check that drugs issued to wards are charged to patients.
- Review purchases against approved vendors and rates.
- Test controlled-drug registers and storage.
- Review returns and write-offs.
See the healthcare and hospital audit workbook for a ready structure.
Purchases and assets
- Are high-value equipment purchases approved, and is the price reasonable?
- Do maintenance contracts match the equipment list?
- Is equipment physically present, in use and tagged?
- Are biomedical equipment calibration and servicing records kept?
Doctor and staff payments
- Do consultant payouts follow signed agreements?
- Are revenue-share calculations complete and accurate?
- Are payments linked to real, billed activity?
- Do payroll and attendance records agree for shift staff?
Compliance and accreditation
Hospitals operate under licences, registrations and, for many, accreditation. NABH is the national accreditation body for hospitals and healthcare providers, and it publishes standards for hospitals. Internal audit does not replace the quality team's own audits, but it can test:
- Whether licences and registrations are current.
- Whether waste disposal, fire safety and radiation approvals are in place.
- Whether patient-consent and medical-record controls are followed.
- Whether corrective actions from earlier inspections are closed.
Tell the quality team what you will cover so audits do not duplicate each other.
Data privacy
Hospitals hold sensitive health data. Test who can access patient records, whether access is logged, and how data is shared with insurers, labs and vendors.
How to scope a hospital audit
- Start with a risk discussion with the finance head, medical director and operations head.
- Use a rolling plan. Cover billing and pharmacy more often, and other areas on a cycle.
- Use data analytics on the billing system to pick samples, not only random picks.
- Report findings by process owner, so action is clear.
Our audit universe guide shows how to set priorities.
Frequently Asked Questions
Which area has the highest leakage risk in a hospital?
Billing and pharmacy are the most commonly cited. Your own data should decide: look at past write-offs, discounts and stock variances.
Is internal audit mandatory for hospitals?
It depends on the legal form. A company is subject to the Companies Act provisions that apply to it. Trusts and charitable bodies have their own rules. Check what applies to yours.
Does NABH require an internal audit?
We could not confirm a fixed schedule from an official source, so check the current NABH standards for your hospital type.
How often should billing be audited?
Many hospitals review it monthly or quarterly, but frequency should follow risk and the volume of transactions.
Should internal audit review clinical quality?
Usually no. Clinical audit is the job of clinical and quality teams. Internal audit tests whether controls around money, stock, compliance and data work.
Related Articles
Statutory facts on this page are checked against their sources, and the page says where it relied on secondary reporting. How we verify · Report an error