Guide
Grant compliance and audit readiness for NGOs: staying ready year-round
Audits are stressful when readiness is a last-minute project. Build it into daily work — documentation, approvals, evidence and sub-grant oversight — and an audit becomes a review.
Most audit stress comes from treating readiness as a project that starts when the auditor's letter arrives. Organisations that report calmly built compliance into daily work, so an audit is a review of records that were always in order — not a scramble to reconstruct them. Here is how to stay ready year-round.
Know each donor's rules before you spend
Every grant carries its own rules: eligible costs, procurement thresholds, documentation standards, reporting formats and deadlines. Capture them at award, not at closeout, and make them visible to the people who spend against the grant. A cost questioned at audit is expensive to fix; the same cost checked before it is incurred is free.
Make approvals part of the workflow
Compliance lives or dies on approvals. Requests, purchase orders, payments and adjustments should each carry the approval that authorised them, with who approved, when, and against which budget line. When the approval is part of the record rather than an email somewhere, the control is real and the trail is automatic.
Keep evidence attached to the transaction
The single biggest audit time-sink is hunting for evidence. Keep supporting documents linked to the transaction they justify: the quote and purchase order with the invoice, the goods-received note with the payment, the signed distribution list with the activity. Evidence that lives with the record turns a sampling request into a lookup.
Enforce eligible-cost and procurement discipline
Two areas draw the most findings: ineligible or misallocated costs, and procurement that skipped a threshold or lacked competition. Guard both at the point of action — allocate costs to the right grant and line as they post, and route purchases through the required RFQ or authorisation for their value. Prevention at entry beats explanation at audit.
Don't forget the sub-grantees
If you pass funds to partners, their compliance is your compliance. Apply the same expectations downstream: eligible costs, documentation, and reporting on a consistent basis, consolidated with your own. A weak sub-grant control is a finding against the prime.
Keep an audit trail you didn't have to assemble
An audit trail is only useful if it is automatic. Every figure should trace back to the records behind it — the transaction, the approval, the evidence — without anyone rebuilding the chain by hand. When that trail is a by-product of doing the work in one connected system, "show us the support for this line" is answered on screen.
Run a light internal review each period
Readiness is a habit. Each reporting period, run a short internal check: narrative-to-finance alignment, indicators-to-logframe, evidence links resolving, and any variance explained. Small, regular reviews keep problems small — and turn the external audit into a formality rather than an ordeal.