What it means
When a review finds a problem, such as a missing approval on invoices or a weakness in access to the accounting system, someone must correct it. The follow-up action is the specific response, written so that it can be assigned and tracked.
Without one, the same issue tends to appear again at the next review, and auditors will report it as a repeat finding. A good follow-up action is specific, measurable and time-bound, so that anyone can tell whether it has been done.
It states what will be done, who is responsible and by when, for example "Finance manager to introduce two-person approval for payments above $10,000 by 30 November". Vague wording such as "improve controls" makes it impossible to tell whether the job is finished.
Follow-up actions are tracked in an action log or register. The log records the issue, the owner, the due date, the status and the evidence that the action has been closed.
Senior management and the audit committee often review this log to see whether risks are being dealt with promptly. The same idea applies outside audit.
After a board meeting, a client call or a month-end close, follow-up actions capture the commitments made. They turn discussion into outcomes and help teams hold each other to account without relying on memory.
Closing an action should require evidence, not just a statement that the work is done. A reviewer may ask to see a revised policy, a system screenshot or a sample of transactions that now follow the new process.
This independent check is what separates real improvement from paperwork, and it gives the audit committee confidence in the log. Priorities matter too.
High-risk findings, such as potential fraud or errors in financial statements, should be dealt with first, while lower-risk points can be scheduled over a longer period. Overdue actions should be escalated to someone with the authority to unblock them.
In practice
Real-world examples.
Example
After an external audit, the auditors note that bank reconciliations were signed off late. The finance director assigns a follow-up action to the financial controller to complete reconciliations within five working days of month end, and the next review samples three months to confirm it.
Example
A project review finds that a supplier contract has no clause on payment penalties. The procurement lead is given the follow-up action of adding the clause at the next renewal and reporting back to the contracts committee.
Example
At the end of a board meeting, the chair records three follow-up actions, each with an owner and a date. The next meeting begins by reviewing which have been completed, and any slipped item is explained before new business is discussed.
Formula
Calculation
On-time closure rate = Actions closed by due date / Total actions due
Suppose an internal audit review raises 40 follow-up actions that were due by the end of the quarter. Of these, 34 were closed by their due date and 6 were late or still open. The on-time closure rate is 34 / 40 = 85%, and the remaining 6 actions (15%) would be escalated to senior management.Case study
Seen in the real world.
Ashford Wholesale is an illustrative, fictional distributor whose internal audit found that new suppliers were being set up without independent checks. The audit report listed the issue, but no one was named as responsible for fixing it.
Six months later, a duplicate supplier was paid $18,000 twice. The audit committee insisted that every finding have an owner, a due date and an evidence requirement, and the finance team built a simple action log that was reviewed at every committee meeting.
Within a year, the on-time closure rate rose from about 60% to over 90%, and repeat findings largely disappeared from the external auditor's letter. The illustrative lesson is that the follow-up process matters as much as the original finding.
Watch out
Common mistakes.
- Writing vague actions with no owner or deadline, which makes progress impossible to measure.
- Closing an action on the owner's word alone without checking evidence, which allows weak fixes to be recorded as complete.
- Tracking actions in several places, such as emails, meeting notes and spreadsheets, so that nobody has a single reliable view of what is still open.
Questions
People also ask.
Who should own a follow-up action?
The person with the authority and the capacity to fix the issue, rather than the person who found it, because ownership without authority tends to stall.
How often should the action log be reviewed?
Many organisations review it monthly or quarterly, with overdue and high-risk items raised sooner, and the audit committee sees a summary at each meeting.
What happens if an action is not completed?
It should be escalated, and the owner should explain the delay and agree a revised date with a senior manager, with the change recorded in the log.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%Related