Sign inSign upSign in
Menu

Public sector audit

ICAN Skills, Audit, Assurance and Forensics. Syllabus area A, introduction to assurance

8 min read · Updated 6 November 2026

Download this topic

In this part

A ministry's accounts show that ₦2 billion was paid for a road that has not been built. A year later the Auditor-General's report to the National Assembly lists the payment as an unsupported expenditure. The same money, spent in a private company, would be of concern only to shareholders.

In government, the money is the public's, so the audit asks more questions: was the money spent for the purpose the law gave it, was the right procedure followed, and did the public get value?

This topic covers the principles of public sector audit, how it differs from private sector audit, who audits government in Nigeria, the three types of public sector audit and the special risks. A full study of public sector accounting follows in the separate Public Sector Accounting and Finance paper.

In 30 seconds

Same principles: an independent audit under the International Standards on Auditing is performed in the same way for a public body as for a company, but the entity changes the risk and the approach. Auditors: usually a supreme audit institution such as the Auditor-General, which may or may not follow the ISAs and may or may not be independent in the full sense of the ethical code.

Differences: accountability for public money, legality and regularity, value for money, reporting to the legislature, political context. Types: financial, compliance and performance audit.

Key terms in plain English

TermWhat it means
Supreme audit institutionThe national body that audits government accounts
Auditor-GeneralThe constitutional officer who audits public accounts
Compliance auditAn audit of legality and regularity of spending
Performance auditAn audit of value for money
IPSASInternational Public Sector Accounting Standards
Ghost workerA name on the payroll of a person who does not work for the entity

Syllabus check

This topic is in syllabus area A, introduction to assurance, legal and regulatory frameworks, and audit process (20% of marks). It covers:

  • the peculiarities of public sector audit
  • value for money and performance audit
  • the audit of not-for-profit and public bodies

CAMA 2020 and the public sector

The Companies and Allied Matters Act 2020 (CAMA 2020) is the company law of Nigeria. The sections below apply to this topic.

SectionWhat it saysLink to this topic
s. 404(1)Auditors of a company report to its membersState-owned companies are audited as companies, with the state as member
s. 403Disqualification of persons connected with the company from acting as auditorIndependence applies to state-owned companies too
s. 407(3)Right of access to books, accounts and vouchersAccess is a condition of all audits

The rules in more depth

The same principles, a different entity

The principles of an independent audit of a public sector entity under the International Standards on Auditing (ISAs) are the same as for any other audit. The main difference is the nature of the entity audited, which affects audit risk and the audit approach. Many countries set up quasi-autonomous non-governmental organisations, called QUANGOs, to audit public sector entities.

QUANGOs may or may not follow the ISAs. May or may not be independent in the full sense of the International Federation of Accountants or the Institute of Chartered Accountants of Nigeria code of ethics. Public sector accounting and audit is studied in more detail in the Public Sector Accounting and Finance paper.

Who audits the public sector in Nigeria

In Nigeria the Auditor-General for the Federation audits the public accounts of the Federation and of all offices, courts, authorities and agencies of the Federation, and reports to the National Assembly (sections 85 and 86 of the Constitution of the Federal Republic of Nigeria 1999). Each state has an Auditor-General for the state (sections 125 and 126), who reports to the House of Assembly.

The constitution is meant to protect the independence of these offices, so that the Auditor-General is not directed or controlled by any other authority in carrying out the audit. The legislature's Public Accounts Committee examines the reports and calls officials to answer.

Firms of chartered accountants may also be engaged to audit statutory corporations, or to help the Auditor-General, and when they do they follow the ISAs and the code of ethics.

Standards for public sector auditors

The International Organisation of Supreme Audit Institutions (INTOSAI) issues the International Standards of Supreme Audit Institutions (ISSAIs) for the audit of government bodies, and these are based on the ISAs. International Public Sector Accounting Standards (IPSAS) set the reporting framework for government financial statements.

Local rules also matter: Financial Regulations, the Fiscal Responsibility Act 2007 and the Public Procurement Act 2007 set the rules that public officers must follow and that the auditor tests.

How public sector audit differs from private sector audit

PointPrivate sectorPublic sector
Objective of the entityProfit for shareholdersService to the public within a budget
To whom the audit is accountableShareholdersThe legislature and, through it, the public
AuditorA firm appointed by the shareholdersUsually a supreme audit institution or its agents, appointed under the constitution or statute
ScopeFinancial statements: true and fair viewFinancial statements, plus legality and regularity of spending and value for money
Main concernFair presentationAccountability, probity, compliance with the budget and the law, and waste
ReportingReport to members, management letterReport to the legislature, often public, with named findings and recommendations
EnvironmentMarketPolitical, with budgets, appropriation laws and public scrutiny
RisksMisstatement, fraudMisuse of funds, corruption, bribery in procurement, ghost workers, unsupported payments, off-budget spending

The three types of public sector audit

  • Financial audit: an opinion on whether the financial statements of the entity are prepared in line with the framework, such as IPSAS, and are free of material misstatement.
  • Compliance audit (regularity and legality): whether the money was spent for the purposes intended by the legislature, with proper authority, following the financial regulations, the appropriation law and the procurement rules.
  • Performance audit (value for money): whether public money was used with economy, efficiency and effectiveness, as set out in the topic on operational and other internal audit assignments.

Special risks and procedures

  • Budget and appropriation: compare actual spending with the approved budget and look for spending above or outside the appropriation.
  • Procurement: test tendering, award, contract variations, payment against work done and certification of work.
  • Payroll: check for ghost workers and unauthorised allowances against staff records.
  • Revenue: test that revenue due to government was collected and paid into the right account, and not retained by agencies.
  • Cash and bank: confirm balances and look for unreconciled accounts, since many government bodies hold many accounts.
  • Fixed assets: existence and ownership of land, buildings and vehicles, which are often poorly recorded.
  • Fraud and corruption: report suspected offences to the proper authorities and the legislature.

Independence and ethics in public sector audit

The independence of a public sector auditor depends on the constitution and the law: security of tenure, the right to decide what to audit, access to all records and freedom to report. Political pressure and a lack of funds are the main threats. The ethical principles are the same as for any accountant, and the public interest is central because the money belongs to the public.

A public sector auditor who finds evidence of crime reports it as the law requires.

Worked examples

Example 1: which audit? The auditor checks whether a ministry spent ₦500 million on the project named in the appropriation law, with proper approval.

  1. That is a compliance audit: regularity and legality.
  2. A financial audit would test the figures, and a performance audit would ask about value for money.

Example 2: ghost workers. The payroll of an agency has 1,200 names, but only 950 people were seen at a headcount.

  1. 250 may be ghost workers.
  2. The auditor matches payroll to personnel records, bank accounts and the headcount, and reports the findings.

Example 3: a firm in the public sector. A firm of chartered accountants is appointed to audit a state-owned company.

  1. It follows the ISAs and the ICAN code of ethics.
  2. It also considers the legal rules for the corporation and reports to the state as the law requires.

Example 4: independence. The Auditor-General is told by the head of government that a report should be softened.

  1. The constitution protects the Auditor-General from direction or control by any other authority.
  2. The report should go to the legislature as the evidence requires.

How to score full marks

  • Say the principles are the same and the entity is different.
  • Name the three types of audit and the extra scope.
  • Link each risk to public money: procurement, payroll, revenue, assets.
  • Mention reporting to the legislature and independence.

Common mistakes in the exam

  • Saying public sector audit has no standards.
  • Saying profit is the measure of public bodies.
  • Leaving out legality and value for money.
  • Ignoring the reporting line to the legislature.

Quick revision

  • Same ISA principles; different entity and risk.
  • Auditor-General reports to the legislature.
  • Financial, compliance and performance audit.
  • Risks: procurement, payroll, revenue, assets, off-budget spending.

Practice questions

Questions 1 to 10 are multiple choice. Questions 11 to 13 are written. Try each before opening the answer.

Question 1. The Auditor-General for the Federation reports to the:

  1. National Assembly
  2. A private board
  3. The bank
  4. The press only
Show the answer

A. Under the Constitution.

Question 2. A performance audit tests:

  1. Value for money
  2. Only the accounts
  3. Only tax
  4. Only fees
Show the answer

A. Economy, efficiency and effectiveness.

Question 3. A compliance audit tests:

  1. Legality and regularity of spending
  2. Marketing
  3. Product quality
  4. Staff morale
Show the answer

A. Spending in line with the law and authority.

Question 4. The ISAs for public sector audits are:

  1. The same in principle
  2. Totally different
  3. Not allowed
  4. Used only for banks
Show the answer

A. The principles are the same.

Question 5. The standards issued by INTOSAI are called:

  1. ISSAIs
  2. ISAEs
  3. ISQMs
  4. IPSAS
Show the answer

A. International Standards of Supreme Audit Institutions.

Question 6. A major public sector risk is:

  1. Ghost workers
  2. Share dividends
  3. Rights issues
  4. Hedging
Show the answer

A. Payroll fraud.

Question 7. The main concern of public sector audit is:

  1. Accountability for public money
  2. Profit
  3. Share price
  4. Marketing
Show the answer

A. The money belongs to the public.

Question 8. Public sector accounts are commonly prepared under:

  1. IPSAS
  2. Only tax law
  3. Only CAMA
  4. No standards
Show the answer

A. International Public Sector Accounting Standards.

Question 9. A threat to a public sector auditor's independence is:

  1. Political pressure
  2. Higher fees
  3. A new building
  4. A holiday
Show the answer

A. Political pressure and lack of funds.

Question 10. The legislative committee that examines audit reports is the:

  1. Public Accounts Committee
  2. Sports Committee
  3. Fashion Committee
  4. Fees Committee
Show the answer

A. The Public Accounts Committee.

Question 11 (10 marks). Explain how the audit of a public sector entity differs from the audit of a private company. (8 marks)

Question 12 (10 marks). Describe the three types of public sector audit. (6 marks)

Question 13 (10 marks). Identify six risks that an auditor of a government agency should consider and a procedure for each. (6 marks)

Model answers

Show the model answer to Question 11

Objective: service v profit; accountable to legislature v shareholders; auditor is a supreme audit institution v appointed firm; scope includes legality, regularity and value for money; reporting to the legislature, often public; political environment; risks of misuse of funds and corruption. (1 each, to 8)

Show the model answer to Question 12

Financial audit: opinion on statements under IPSAS. (2) Compliance audit: legality and regularity of spending. (2) Performance audit: economy, efficiency and effectiveness. (2)

Show the model answer to Question 13

Budget overspending (compare with appropriation); procurement irregularities (test tendering); ghost workers (match payroll to records); revenue leakage (trace collection); unreconciled bank accounts (confirm and reconcile); fixed assets unrecorded (verify existence). (1 each)

Spotted a mistake? Tell us and we will check it.

Where this fits

See every past question on Audit, Assurance and Forensics and the topic each one tests in the Pathfinder question finder.

After it, move on to Advanced Audit, Assurance and Forensics.

All Audit, Assurance and Forensics topics

You are reading topic 24 of 67.

  1. Meaning and objectives of audit, the need for audit and types of audit01
  2. Assurance engagements, levels of assurance and sustainability assurance02
  3. Statutory audit and the legal framework: CAMA 2020 and the FRC Act03
  4. International standards on auditing, assurance engagements and Nigerian standards04
  5. Obtaining and accepting a new audit engagement05
  6. Engagement letters: agreeing the terms of an audit engagement (ISA 210)06
  7. Fundamental ethical principles and the conceptual framework07
  8. Independence, objectivity and integrity of the auditor08
  9. Confidentiality in audit and assurance engagements09
  10. Conflicts of interest and resolving ethical conflicts10
  11. Non-compliance with laws and regulations (NOCLAR) and whistleblowing11
  12. Public interest and professional scepticism in audit and assurance12
  13. Rules-based and principles-based ethics, and ethics in governance13
  14. Internal audit: concept, role and its place in internal control14
  15. Internal audit compared with external audit15
  16. Operational and other internal audit assignments16
  17. Internal audit reports, regulation, ethics and outsourcing17
  18. Planning an audit (ISA 300)18
  19. Understanding the entity, its environment and its laws (ISA 315 and ISA 250)19
  20. Materiality in planning and performing an audit (ISA 320)20
  21. Audit risk and the auditor\u2019s response to assessed risks (ISA 330)21
  22. Fraud and the auditor (ISA 240)22
  23. Audit of not-for-profit organisations23
  24. Public sector audit24 here
  25. Audit evidence (ISA 500)25
  26. Audit documentation and working papers (ISA 230)26
  27. Audit sampling (ISA 530)27
  28. Importance, objectives and types of internal control28
  29. Control environment, the risk assessment process and monitoring of controls29
  30. Control activities and IT controls30
  31. Limitations of internal control and recording control systems31
  32. Evaluating controls and assessing audit risk32
  33. Risks of specialised IT systems and information security measures33
  34. Tests of controls and the main transaction cycles34
  35. The sales system: controls and tests of controls35
  36. The purchases and expenses system: controls and tests of controls36
  37. The payroll system: controls and tests of controls37
  38. The bank and cash system: controls and tests of controls38
  39. The inventory and non-current asset systems: controls and tests of controls39
  40. Management letters and reporting control deficiencies40
  41. Substantive procedures: role and approach41
  42. Analytical procedures (ISA 520)42
  43. Audit of tangible non-current assets43
  44. Audit of intangible non-current assets44
  45. Inventory: valuation and the physical count (ISA 501)45
  46. Trade receivables, prepayments and external confirmations (ISA 505)46
  47. Substantive procedures on bank and cash balances47
  48. Trade payables, accruals, provisions and contingencies48
  49. Non-current liabilities, equity and directors\u2019 emoluments49
  50. Key income statement figures50
  51. Written representations (ISA 580)51
  52. Evaluating misstatements (ISA 450) and the overall review of the financial statements52
  53. Purpose of the auditor\u2019s report and the audit expectation gap53
  54. The unmodified auditor\u2019s report (ISA 700)54
  55. Key audit matters (ISA 701) and reports prescribed by law55
  56. Audit reporting under CAMA 2020 and the audit committee56
  57. Going concern (ISA 570)57
  58. Modified opinions, emphasis of matter and other matter paragraphs58
  59. Information systems audit: risks, protection and the audit process59
  60. Vulnerability audit, data centre audit, banking transactions and IT audit reports60
  61. Data analytics, artificial intelligence, blockchain and other audit technology61
  62. Nature, objectives and types of forensic accounting services62
  63. Economic damage through contract and tort63
  64. Computer forensics, fraud investigation and litigation support64
  65. Hidden assets: how forensic accountants find them65
  66. Professional negligence in forensic investigations66
  67. The expert report and reporting in forensic engagements67
See the whole course

Get the complete Audit, Assurance and Forensics notes

Download as PDF or Word

  • Every topic as PDF and Word, ready to print
  • Edit it in Word or print the PDF. No retyping.
Get this course

Reading stays free. Access lasts 12 months. Pay by card, bank transfer, USSD or QR through Paystack. Your name and email appear on every page of your files. Read our Refund Policy.

PracticeNext topic