Community Tool Box Community Tool Box

Chapter 31., Section 9. Organizing Audits of Consumer Services — Main Section | Community Tool Box

Main Section
mloewenstein Wed, 12/12/2012 - 12:34
  • What are audits of consumer services?

  • Why conduct audits of consumer services?

  • Who should conduct audits of consumer services?

  • When should you conduct audits of consumer services?

  • How do you conduct audits of consumer services?

Imagine that an experienced restaurant worker applies for a small-business loan.

The applicant has relevant work experience, savings, a business plan, a partner, and potential collateral, but the bank denies the application. Later, the applicant learns that another person seeking a similar loan received approval from the same bank under apparently comparable circumstances.

Concerned that lending decisions may not be applied consistently, the applicant contacts an attorney and an appropriate banking oversight agency.

A review of lending practices may examine whether applicants are being treated consistently and whether race, ethnicity, national origin, or another protected characteristic is improperly affecting decisions.

This kind of review illustrates one purpose of a service audit: to determine whether a service is being delivered as required, whether access is fair, and whether policies and practices are consistent with applicable standards.

Service audits may also examine whether publicly funded programs are providing the services they agreed to provide, whether funding is being used for its intended purpose, whether important services are unavailable, or whether procedures create unnecessary barriers for the people the service is intended to reach.

What is an audit of consumer services?

In this section, an audit of consumer services is a structured examination of a service's policies, practices, procedures, access, and delivery.

The audit asks whether the service:

  • Is actually being provided
  • Matches what was promised, funded, contracted, or required
  • Complies with applicable laws and regulations
  • Follows relevant professional and ethical standards
  • Is accessible to the people it is intended to serve
  • Is delivered consistently and fairly

An audit is different from a program evaluation.

For the purposes of this section, an audit focuses primarily on whether services, procedures, and practices meet established requirements or expectations.

An evaluation focuses more directly on whether a program produces intended outcomes.

In practice, some reviews may include elements of both.

Internal and external audits

An organization may review its own services internally.

Internal reviews can identify problems early and support continuous improvement.

An external audit can provide greater independence when:

  • There are allegations of discrimination or misconduct
  • Public or charitable funds are involved
  • A regulator or funder requires independent review
  • Trust in the organization is limited
  • The organization has a conflict of interest in evaluating itself

Independence does not mean the auditor has no perspective or institutional interests. The auditor's qualifications, role, methodology, and conflicts of interest should be transparent.

Financial audits and service audits

The word audit is often associated with financial records.

Financial audits generally examine whether financial statements and accounting practices meet applicable standards and accurately reflect an organization's finances.

A service audit may include financial questions when they are relevant, such as:

  • Whether funds were spent for their intended purpose
  • Whether contracted services were actually delivered
  • Whether fees or charges were applied appropriately
  • Whether financial practices created barriers to access

Types of consumer and public services

Service audits may apply to many kinds of programs and institutions.

Publicly funded or publicly supported services

These may include:

  • Maternal, infant, and child health and nutrition services
  • Adult education and literacy programs
  • Workforce development and job-training programs
  • Parenting and family-support programs
  • Services for families experiencing homelessness
  • Reentry services for people returning from incarceration
  • Disability services
  • Public-health programs
  • Housing assistance
  • Transportation assistance

These services may be designed for people who meet particular eligibility requirements or face specific barriers.

Regulated services offered to the general public

These may include:

  • Transportation
  • Banking and lending
  • Real estate and housing
  • Financial services
  • Health care
  • Utilities
  • Municipal services
  • Education
  • Insurance
  • Telecommunications

Why conduct audits of consumer services?

To determine whether needed services are actually available

An audit can examine whether a community has access to the services that are supposed to exist and whether those services are available in practice.

For example, a program may technically offer a service but provide it only during hours that make it inaccessible to many participants.

To support advocacy for needed services

If an audit identifies important gaps, the findings can support requests for:

  • Additional funding
  • New services
  • Expanded hours
  • Additional locations
  • Transportation support
  • Language access
  • Disability access

Audit findings should be used as evidence, not merely as “ammunition” against an organization.

To determine whether funded services are being delivered as promised

Contracts, grants, laws, regulations, and program descriptions often establish what a provider is expected to deliver.

An audit can compare those requirements with actual practice.

Differences may result from:

  • Limited capacity
  • Poor management
  • Inadequate funding
  • Implementation problems
  • Misunderstanding of requirements
  • Improper use of funds
  • Deliberate misconduct

Avoid assuming deception before the evidence supports that conclusion.

To protect the interests and rights of people using services

People receiving publicly funded or regulated services may face barriers to filing complaints or influencing institutions.

Barriers may include:

  • Limited information about rights or procedures
  • Language barriers
  • Disability-related barriers
  • Fear of retaliation or loss of services
  • Limited transportation or technology access
  • Complicated grievance procedures

An audit can help identify those barriers.

People who use the service should also have meaningful opportunities to help define what should be examined and to explain how the service operates in practice.

To protect public and charitable resources

Public or charitable funds should be used consistently with the purpose for which they were provided.

Audits can help determine whether:

  • Services are being delivered
  • Funding is being used as authorized
  • Required reporting is accurate
  • Contracts and grant requirements are being followed

To improve services and community outcomes

An audit may identify procedural or operational problems that can be corrected.

Examples include:

  • Confusing intake procedures
  • Inadequate staff training
  • Unnecessary documentation requirements
  • Unequal treatment
  • Poor communication
  • Inadequate language or disability access
  • Services that do not match the program's stated purpose

Who should organize or conduct an audit?

The person or organization requesting an audit does not always need to be the one conducting it.

Separate the questions:

  • Who should request or organize the audit?
  • Who has the authority and expertise to conduct it?
  • Who can access the necessary information?
  • Who can do the work with sufficient independence?

Do you have the necessary expertise?

Auditors need enough subject-matter knowledge to understand:

  • Applicable laws and regulations
  • Funding or contractual requirements
  • Relevant professional standards
  • How the service is supposed to operate
  • Appropriate research and data-analysis methods

Specialized questions may require legal, financial, medical, statistical, accessibility, engineering, or other expertise.

Do you have the resources?

A careful audit may require substantial:

  • Staff time
  • Data analysis
  • Interviews
  • Document review
  • Travel
  • Translation or interpretation
  • Accessibility accommodations
  • Legal or technical consultation

Are you sufficiently independent?

An advocacy organization can identify concerns, gather information, or request an audit.

In some situations, however, an independent auditor may strengthen confidence in the process.

Independence may be especially important when:

  • The auditor and provider are organizational competitors
  • Political controversy is significant
  • The audit may lead to sanctions or funding decisions
  • Serious allegations are involved

Credibility should depend primarily on qualifications, transparency, sound methods, independence, and evidence – not simply on prestige, political status, or name recognition.

Can the auditor obtain the information needed?

Formal regulators, funders, inspectors general, auditors, or other oversight bodies may have authority to obtain records that are not available to the general public.

A community organization conducting an independent review may need to rely on:

  • Public records
  • Voluntarily provided records
  • Interviews
  • Publicly observable conditions
  • Program participants' experiences

Be clear about these limitations when reporting findings.

Possible auditors

Depending on the issue, appropriate auditors or reviewers may include:

  • Government regulatory or oversight agencies
  • Inspectors general or auditors
  • Funding organizations
  • Licensing or professional oversight bodies
  • Qualified independent consultants
  • Researchers or evaluators with relevant expertise
  • Peer-review teams
  • Community-based oversight bodies
  • Watchdog organizations with appropriate expertise

Well-known individuals or public figures are not automatically appropriate auditors. Relevant expertise and a credible process matter more than prestige.

When should you organize or conduct an audit?

When there is a question about whether needed services exist

An audit can identify:

  • Missing services
  • Inadequate capacity
  • Geographic gaps
  • Long waiting periods
  • Eligibility barriers
  • Limited hours

When advocating for a service or funding change

Audit findings can help explain why additional resources or different services may be needed.

Conduct the audit when reliable information is needed for decision-making, rather than timing it primarily to take advantage of an election or political campaign.

When there are concerns about equitable access

An audit can examine whether people are treated differently because of:

  • Race or ethnicity
  • National origin
  • Disability
  • Language
  • Gender
  • Age
  • Income or economic circumstances
  • Geography
  • Another characteristic relevant to applicable law or program policy

Differences in outcomes do not automatically establish discrimination, but they may identify patterns that require closer examination.

When program incentives may unintentionally exclude people

Funding formulas can sometimes create incentives to enroll people who are easiest to serve rather than those facing the greatest barriers.

For example, a workforce or adult-education provider paid primarily according to completion or employment rates may have incentives to prioritize applicants who are already closest to completing the program successfully.

An audit can examine whether funding and performance measures are unintentionally narrowing access.

When funding is at stake

An audit may help determine whether:

  • Funding should continue
  • Additional resources are justified
  • Funding conditions should change
  • Corrective action is needed
  • Another provider or delivery model should be considered

During broader community planning

Service audits can contribute to community assessments by identifying:

  • Service gaps
  • Duplication
  • Access barriers
  • Equity concerns
  • Coordination problems
  • Areas requiring additional investment

How do you organize or conduct an audit of consumer services?

Organizing an audit

Gather evidence that an audit may be needed

Begin with enough information to explain the concern clearly.

Possible indicators include:

  • Repeated complaints
  • Documented service gaps
  • Inconsistent treatment
  • Possible violations of law or policy
  • Questions about whether funds are being used as required
  • Significant differences between promised and actual services
  • Patterns suggesting unequal access

Community reports and informal information may provide useful leads but should be verified before being presented as established facts.

Protect people who report concerns

People using services may fear retaliation, loss of benefits, embarrassment, or other harm if they complain.

Before collecting or publishing their accounts:

  • Explain how information may be used
  • Obtain meaningful consent
  • Protect identifying information where appropriate
  • Consider retaliation risks
  • Avoid making promises of confidentiality that you cannot keep

Identify the appropriate auditor

Ask:

  • Who has formal authority?
  • Who has relevant expertise?
  • Who can access necessary records?
  • Who is sufficiently independent?
  • Who can conduct the audit fairly and transparently?

Build appropriate support

Support may come from:

  • People who use the service
  • Community organizations
  • Funders
  • Oversight agencies
  • Public officials
  • Professional organizations

Public attention is not always necessary for an audit to be effective.

Decide whether public communication is useful based on:

  • The seriousness of the issue
  • Safety and retaliation risks
  • Whether the organization is cooperating
  • Whether public disclosure is necessary for accountability
  • Whether disclosure could interfere with an investigation

Avoid hiding serious misconduct merely to preserve a future relationship with the organization.

At the same time, not every problem requires immediate public exposure. The response should fit the evidence, severity, and accountability needs.

Conducting an audit

Define the purpose and scope

Before gathering data, state clearly:

  • What service or practice is being audited
  • What period the audit covers
  • Which standards will be used
  • Which questions the audit will answer
  • Which questions are outside its scope

A clearly defined scope helps prevent the audit from becoming a general search for anything that may reflect poorly on the organization.

Budget the necessary resources

Plan for:

  • Staff time
  • Data collection
  • Records review
  • Interviews
  • Translation and interpretation
  • Accessibility
  • Technical expertise
  • Data security
  • Report preparation

Establish a working process with the organization when appropriate

If the organization is cooperating, clarify:

  • Schedule
  • Records requested
  • Interview access
  • Confidentiality
  • Privacy protections
  • Who will receive preliminary and final findings
  • Whether the organization will have an opportunity to correct factual errors

Cooperation should not compromise the auditor's independence.

Distinguish an audit from an outside investigation

If an organization provides no access to internal records or staff, an outside group may still conduct an investigation or public-interest review using available evidence.

Be clear about the limits of that process.

Do not describe an investigation based solely on public information as though it had the same access or authority as a formal audit.

Determine what information is needed

Depending on the audit, information may include:

  • Financial information
  • Number of people served
  • Geographic reach
  • Demographic information relevant to equitable access
  • Eligibility criteria
  • Wait times
  • Hours and locations
  • Language access
  • Disability access
  • Staff qualifications
  • Grievance procedures
  • Service-delivery methods
  • Participant experiences
  • Contract or grant requirements

Collect demographic information only when it serves a clear purpose and protect sensitive personal data.

Gather information

Possible sources include:

  • Contracts
  • Grant agreements
  • Policies
  • Procedures
  • Service records
  • Financial records
  • Board or governing-body records
  • Public records
  • Annual reports
  • Reports to funders
  • Complaints and grievances
  • Interviews
  • Surveys
  • Observation
  • Community-generated information

Follow applicable privacy, confidentiality, consent, and records-access requirements.

Interview a range of people

Depending on the service, interview:

  • Current and former service users
  • Family members or caregivers when relevant
  • Frontline staff
  • Supervisors
  • Administrators
  • Board members
  • Funders
  • Oversight officials
  • Partner organizations
  • Community organizations

Service users should not be treated merely as sources of complaints. Their experience can help explain how policies function in practice.

Observe service delivery when appropriate

Observation may help auditors understand:

  • Intake procedures
  • Waiting conditions
  • Accessibility
  • Staff-participant interactions
  • Classroom or program operations
  • Transportation routes
  • Follow-up procedures

Observation should respect privacy and informed-consent requirements where applicable.

Analyze the data

Compare actual practice with the standards identified at the beginning of the audit.

Ask:

  • Is the service being delivered as required?
  • Are policies followed consistently?
  • Are participants informed of their rights and grievance procedures?
  • Are people able to access the service?
  • Are particular populations disproportionately excluded or burdened?
  • Are funds being used consistently with the program's purpose?
  • Are records complete and accurate?
  • Are there unexplained differences between policy and practice?

Required procedures

Some funded or regulated programs must maintain:

  • Grievance procedures
  • Participant notices
  • Eligibility documentation
  • Nondiscrimination procedures
  • Privacy protections
  • Required reporting

An audit can determine whether those requirements exist on paper and whether they are actually being implemented.

Use of funds

An audit may examine whether program funds are used consistently with grants, contracts, donor restrictions, or other requirements.

Do not assume that high administrative spending alone proves misuse.

Administrative costs can include necessary functions such as:

  • Staff supervision
  • Financial controls
  • Technology
  • Compliance
  • Training
  • Evaluation

Focus on whether spending is reasonable, authorized, transparent, and connected to the organization's responsibilities.

Fraud or serious misrepresentation

If evidence suggests that an organization is reporting services it did not provide or intentionally providing false information, the issue may require formal investigation.

Distinguish:

  • Errors
  • Weak documentation
  • Poor management
  • Contract noncompliance
  • Misrepresentation
  • Fraud

Do not label conduct fraudulent unless the evidence supports that conclusion.

Equity and discrimination

Service audits can identify patterns in access or treatment.

Examples may include:

  • Transportation routes that provide substantially less access to some neighborhoods
  • Programs serving large numbers of people who use languages other than English without appropriate language access
  • Physical or digital systems that create barriers for people with disabilities
  • Lending or housing practices that appear to differ by race, ethnicity, national origin, disability, or another protected characteristic

Statistical differences may identify a need for further review but do not automatically establish unlawful discrimination.

Prepare the audit report

A useful report should explain:

  • Why the audit was conducted
  • The audit's scope
  • Standards used
  • Methodology
  • Sources of information
  • Limitations
  • Findings
  • Strengths
  • Problems or inconsistencies
  • Recommended corrective actions

A detailed report creates a record of what was found at a particular point in time.

It should not imply that findings are beyond dispute merely because the report is detailed.

Readers should be able to understand how the conclusions were reached.

Acknowledge what is working

An audit should identify strengths as well as problems.

This can help:

  • Preserve effective practices
  • Distinguish isolated problems from broader failures
  • Make recommendations more specific

Recommend corrective action

Recommendations should be tied directly to the findings.

Depending on the problem, they might include:

  • Revising policies
  • Staff training
  • Improved language or disability access
  • Changes in eligibility or intake procedures
  • Stronger financial controls
  • Better complaint processes
  • Additional staffing
  • Improved documentation
  • Independent monitoring
  • Referral to an oversight authority when serious violations may have occurred

Develop a corrective-action plan

When problems can be corrected, establish:

  • Specific actions
  • Responsible individuals or departments
  • Timelines
  • Resources required
  • Measures of completion
  • Follow-up review dates

The auditor may help identify corrective actions, but responsibility for operating the service remains with the provider and relevant oversight bodies.

Decide what to do with the findings

The appropriate response depends on the seriousness of the findings, the authority of the auditor, and the risk to people using the service.

Share findings with organizational leadership or the governing board

Internal leadership may be able to correct operational or management problems.

Work with the provider on corrective action

Collaboration may be appropriate when:

  • Problems appear correctable
  • The organization acknowledges them
  • Leadership is willing to act
  • Immediate public disclosure is not necessary to protect people from harm

Report findings to an appropriate oversight body

Serious or unresolved concerns may need to be referred to:

  • Regulators
  • Funders
  • Inspectors general
  • Licensing bodies
  • Civil-rights agencies
  • Auditors
  • Other responsible authorities

A community organization does not necessarily need to prove an entire legal case before making a good-faith report to an agency responsible for investigation.

Consider legal action when appropriate

Litigation may be appropriate when:

  • Rights have been violated
  • Serious harm is ongoing
  • Administrative remedies are inadequate
  • A court order or other legal remedy is necessary

Seek qualified legal advice about applicable rights, deadlines, evidence, and remedies.

Communicate findings publicly when appropriate

Public communication may include:

  • Publishing the audit report
  • Holding a community meeting
  • Sharing findings with journalists
  • Giving public testimony
  • Posting accessible summaries or data

Public communication should serve transparency and accountability rather than being used primarily as a threat to obtain concessions.

Before publication:

  • Verify important findings
  • Protect confidential and personal information
  • Distinguish findings from allegations
  • Explain important limitations
  • Consider whether people using the service could face retaliation

Follow up

An audit is useful only if findings lead to appropriate follow-up.

Monitor whether:

  • Corrective actions were completed
  • Service access improved
  • Problematic practices stopped
  • Policies were actually implemented
  • New problems emerged
  • Additional oversight is necessary

Follow-up does not always require repeating a full audit on a fixed schedule.

The appropriate frequency depends on:

  • The seriousness of the findings
  • Legal or funding requirements
  • The risk of recurrence
  • Whether corrective actions are complete
  • Available oversight resources

In Summary

Audits of consumer services can help communities determine whether publicly funded or regulated services are available, accessible, fair, and consistent with applicable standards.

A service audit generally focuses on practices, procedures, policies, and compliance. An evaluation focuses more directly on outcomes, although some reviews may include elements of both.

Audits can identify service gaps, unequal access, failures to deliver contracted services, financial or procedural problems, and other barriers affecting people who use services.

People directly affected should have meaningful opportunities to contribute to the audit rather than being treated merely as sources of complaints.

The organization requesting an audit does not necessarily need to conduct it.

Choose an auditor according to expertise, authority, access to information, independence, methodology, and available resources rather than prestige alone.

Define the audit's scope and standards before gathering information.

Use records, interviews, observation, program data, complaints, and other relevant information while protecting privacy and confidentiality.

Compare actual practice with applicable requirements and distinguish errors, poor management, noncompliance, misrepresentation, and fraud rather than treating them as interchangeable.

Examine equitable access carefully. Differences across populations may identify important concerns but should be analyzed before conclusions about discrimination are drawn.

The audit report should explain methods, findings, strengths, limitations, problems, and recommended corrective actions.

When problems are correctable, develop a clear action plan with responsibilities, timelines, and follow-up.

More serious findings may require referral to regulators, funders, civil-rights agencies, courts, or other oversight bodies.

Public communication may also be appropriate, but it should promote transparency and accountability rather than function primarily as a threat.

Finally, follow up after the audit.

The goal is not merely to identify what is wrong. It is to determine whether services are being delivered fairly and appropriately, correct deficiencies, protect the people who rely on those services, and strengthen accountability over time.

Contributor

Phil Rabinowitz

Resources

Online Resources

About PIRC/Social Audit is a British consumer watchdog modeled on Public Citizen, currently focusing on an audit of the use of anti-depressants and the pharmaceutical industry.

The European Union Eco-Management and Audit Scheme (EMAS) is a management tool for companies and other organisations to evaluate, report and improve their environmental performance.

The U.K. Audit Commission on conducting crime and safety audits. An excellent take on what information to collect, how to get it, etc.

https://ctb.ku.edu/en/table-of-contents/advocacy/advocacy-research/audit-consumer-services/main
CC BY-NC-SA 4.0
© 1994-2026 The University of Kansas. All Rights Reserved.