Audits
The audit module gives auditors a dedicated workspace to access selected programs, organizations (applicants), and payment requests without needing full program-manager or project access.
Purpose
- Scoped access — Auditors see only the programs, organizations, and payment requests that have been added to an audit.
- Document review — View payment request details and attached files (invoices, supporting documents, workflow step files) for evidence.
- Bulk download — Download files in bulk by program, by organization, or by payment request to support offline review and work papers.
- No edit rights — Audit access is read-only (and download); auditors do not change data in the main program/project areas.
Audit Structure
- Audit — Top-level audit container (e.g., “FY2024 Program A Audit”). Has its own user access list so only designated auditors can open it.
- Programs — One or more programs can be attached to an audit. Auditors then see those programs in the audit view (e.g., program list or summary).
- Organizations (applicants) — Applicants (organizations) can be attached to an audit, often with tabbed views (e.g., by program or by payment request). This supports “audit by subrecipient” or “audit by program.”
- Payment requests — Payment requests (from the attached programs/projects) can be listed and filtered in the audit view. Auditors can open a request and see its main form, invoice table, and all attached files.
Typical Workflow
- Create audit — Admin creates an audit and names it (e.g., by year and program).
- Add programs and organizations — Attach the relevant programs and applicants so the audit scope is clear.
- Grant user access — Add auditor users to the audit so they can log in and see the audit workspace.
- Review — Auditors use the audit index/view to navigate to programs, organizations, and payment requests and open documents.
- Bulk download — When needed, auditors use bulk-download actions to get all files for a program, organization, or payment request set.
Summary
The audit module keeps audit activity separate from day-to-day grant management while giving auditors controlled, repeatable access to the programs, subrecipients, and payment request documentation they need.