Audit glossary

Elements of a finding

Criteria, condition, cause, effect, and the recommendation.

CIA

Criteria is what should be (policy, standard, expectation). Condition is what is. Cause is why the gap exists. Effect is the risk or impact. A recommendation or management action plan addresses the cause.

On the exam

The element that explains why the condition exists is the cause, and the best recommendations target it.

Related terms

Test yourself with today’s question of the day.