Corrective action plans, the summary schedule of prior findings and audit follow-up

What the auditee must put in the corrective action plan and summary schedule under 2 CFR 200.511, and how the auditor follows up on prior findings under 200.514(e).

4 min read · CORAA Team
Lesson 12 of 13 · 0 of 13 complete
In this lesson you will
  • Identify the required content of a corrective action plan under 200.511(c)
  • Report the status of prior findings in the summary schedule under 200.511(b)
  • Apply the three conditions for treating a prior finding as no longer warranting action
  • Perform audit follow-up and report a materially misrepresented summary schedule

The auditee's two documents

2 CFR 200.511(a) makes the auditee responsible for follow-up and corrective action on all audit findings. It prepares two documents, both carrying the reference numbers the auditor assigned, and both covering financial statement findings that GAGAS required the auditor to report as well as federal award findings.

Corrective action plan

At the completion of the audit, the auditee prepares a corrective action plan addressing each finding in the current-year report (200.511(c)). It must be separate from the auditor's findings and must give:

  • the name of the contact person or persons responsible for the corrective action;
  • the corrective action to be taken; and
  • the anticipated completion date.

If the auditee disagrees with a finding or believes corrective action is not required, the plan must include a detailed explanation. A plan that says "management will review the process" with no owner or date does not meet the rule. The corrective action plan guide has model language.

Summary schedule of prior audit findings

The summary schedule reports the status of every finding in the prior audit's schedule of findings and questioned costs, plus findings carried in the prior summary schedule that were not yet resolved (200.511(b)). Because it may include findings from several years, it shows the fiscal year in which each finding first occurred. For each finding:

  • Fully corrected: list it and state that corrective action was taken.
  • Not corrected or partially corrected: describe the reasons the finding recurred, the planned corrective action and any partial action taken. Explain any significant difference from the action previously reported or from the management decision.
  • No longer valid or not warranting further action: describe the reasons. A valid reason exists when all three conditions are met: two years have passed since the audit report in which the finding occurred was submitted to the FAC; the federal agency or pass-through entity is not currently following up; and no management decision was issued (200.511(b)(3)).

A finding listed as corrected drops off the next summary schedule. Use the summary schedule template.

Auditor follow-up

The auditor must follow up on prior audit findings regardless of whether the prior finding relates to a current-year major program (200.514(e)). Follow-up includes procedures to assess the reasonableness of the summary schedule. If the summary schedule materially misrepresents the status of any prior finding, the auditor reports that as a current-year finding (200.514(e) and 200.516(a)(7)).

Practical procedures:

  • Agree the summary schedule's list to the prior-year schedule of findings and the prior summary schedule. Nothing should be missing.
  • For findings reported as corrected, obtain evidence: a redesigned control operating this year, a repaid questioned cost, a revised policy in use.
  • For findings on nonmajor programs, perform enough work to assess the status claimed, even though you are not giving an opinion on that program.
  • Compare the current-year results: a finding labeled corrected that recurs in this year's testing is a repeat finding and a misrepresentation question.
  • Check management decisions received since the last audit.

Management decisions

The federal agency or pass-through entity must issue a management decision within six months of the FAC's acceptance of the audit report (200.521(d)). It states whether the finding is sustained, the reasons and the expected auditee action. The auditee should begin corrective action no later than receipt of the audit report. See the management decisions guide.

Common file mistakes

  • Prior findings on nonmajor programs not followed up.
  • "Corrected" accepted on management's say-so with no evidence.
  • Repeat findings not cross-referenced to the prior reference number.
  • Corrective action plans with no named contact or completion date.
Worked example

Fairhaven Arts Council: is the summary schedule reasonable?

Fairhaven Arts Council's fiscal 2026 summary schedule lists three prior findings.

2024-001 (procurement, nonmajor program in 2026): "No longer warrants further action." The fiscal 2024 report was submitted to the FAC on March 15, 2025. The 2026 audit is wrapping up in February 2027, so two years have not passed since submission. Condition (i) of 200.511(b)(3) fails, so the status is not supportable. The council must report it as corrected, partially corrected or not corrected.

2025-001 (reporting, major program): "Fully corrected." Testing of all four 2026 quarterly reports finds them timely and accurate, and the new review checklist operated each quarter. Status is reasonable.

2025-002 (eligibility, major program): "Fully corrected." The 2026 eligibility sample of 60 finds 3 files missing income verification, the same condition as 2025. The finding has recurred, so the status is wrong.

Evaluation: the misstatement on 2025-002 is material, because the schedule tells agencies a recurring eligibility failure is fixed. The auditor reports a current-year finding under 200.516(a)(7), reports the eligibility exceptions as finding 2026-001 flagged as a repeat of 2025-002, and asks management to correct the 2024-001 status.

Self-check

Answer each question before you open the answer.

  1. What three items must every corrective action plan include?

    Show answer

    The contact person or persons responsible, the corrective action to be taken and the anticipated completion date (200.511(c)), plus a detailed explanation if the auditee disagrees with a finding.

  2. Must the auditor follow up on a prior finding for a program that is not major this year?

    Show answer

    Yes. 200.514(e) requires follow-up on prior audit findings regardless of whether the finding relates to a major program in the current year.

  3. An agency has been silent on a finding for three years but issued a management decision two years ago. Can the auditee mark it as not warranting further action?

    Show answer

    Not under 200.511(b)(3). All three conditions must be met, and one is that no management decision was issued.

Sources

Back to the syllabus

Standards are paraphrased from the primary sources listed above; read the source before relying on a requirement. This lesson is training material, not professional advice. Report an error

For US CPA firms

Join the CORAA waitlist

CORAA AI drafts audit working papers from your client’s QuickBooks books and does the first pass: lead schedules, tie-out, memos, draft notes and letters. CORAA Network reviewers clear every finding. Your firm reviews and signs.

  • First audit free, so you can judge the quality on a real file
  • Flat fee by entity size; messy books included
  • We work only with CPA firms, never their clients
See how it works →

* required