Back to the menu

What Is a Yellow Book Audit and When Is It Required?

Table of Contents

A Yellow Book audit is an audit performed in accordance with Generally Accepted Government Auditing Standards, commonly called GAGAS. These standards are issued by the U.S. Government Accountability Office and are designed to promote accountability, transparency, independence, and quality in audits involving government entities and public funds.

Not every organization that receives government funding automatically needs a Yellow Book audit. The requirement may come from a law, regulation, grant agreement, contract, government agency, or pass-through entity.

A Yellow Book audit is also required as part of a Single Audit. For fiscal years beginning on or after October 1, 2024, a nonfederal entity that expends $1 million or more in federal awards generally must undergo a Single Audit.

However, an organization that spends less than $1 million in federal awards may still need a Yellow Book audit if its funding agreement or another applicable requirement calls for an audit conducted under GAGAS.

What Is the Yellow Book?

What Is a Yellow Book Audit

The Yellow Book is the common name for the Government Auditing Standards published by the U.S. Government Accountability Office. These standards explain how auditors should plan, perform, document, and report on audits involving government entities, programs, activities, and organizations that receive government awards.

The Yellow Book is not a single type of audit. It is a set of professional standards that can apply to several kinds of audit and assurance engagements.

An engagement performed under the Yellow Book may include additional requirements beyond those found in a standard financial statement audit. These requirements address areas such as:

  • Auditor independence
  • Ethical conduct
  • Professional judgment
  • Auditor competence and continuing education
  • Quality management within the audit firm
  • Audit documentation
  • Internal control
  • Compliance with laws, regulations, contracts, and grant agreements
  • Reporting identified findings

A standard financial statement audit primarily provides an opinion on whether an organization’s financial statements are fairly presented. A Yellow Book financial audit also includes additional attention to internal control and compliance matters relevant to the audit objectives.

When Is a Yellow Book Audit Required?

When Is a Yellow Book Audit Required

There is no universal dollar threshold that automatically triggers every Yellow Book audit. Instead, the requirement generally comes from the law, award, agreement, or government program governing the organization’s funding.

The following are some of the most common situations in which a Yellow Book audit may be required.

1. The Organization Requires a Single Audit

A Single Audit is required when a state, local government, Indian Tribe, institution of higher education, or nonprofit organization expends $1 million or more in federal awards during its fiscal year.

The $1 million threshold applies to fiscal years beginning on or after October 1, 2024. The previous threshold was $750,000.

It is important to calculate federal awards expended, not simply the amount awarded, received, or remaining in the organization’s bank account.

A Single Audit must be performed under both:

  • The Uniform Guidance in 2 CFR Part 200, Subpart F
  • Generally Accepted Government Auditing Standards, or the Yellow Book

Therefore, every Single Audit includes Yellow Book requirements, but not every Yellow Book audit is a Single Audit.

Organizations approaching the threshold should review their federal expenditures before year-end and consult with an auditor early. Learn more about the current Single Audit requirements.

2. A Grant or Funding Agreement Requires GAGAS

An organization may be required to undergo a Yellow Book audit even when it spends less than $1 million in federal awards.

Federal, state, and local grant agreements may require the recipient or subrecipient to obtain an audit performed in accordance with GAGAS. The agreement may require:

  • An organization-wide financial statement audit
  • An audit of a particular program
  • A compliance audit
  • An attestation engagement
  • Agreed-upon procedures related to specific requirements

Organizations should review the audit provisions in every grant and subaward agreement instead of relying solely on the Single Audit threshold.

3. State or Local Law Requires It

State agencies, municipalities, counties, school districts, and other public entities may be subject to audit requirements established by state statutes, local ordinances, regulators, or oversight agencies.

These requirements vary by jurisdiction. A state or local requirement may call for a Yellow Book audit regardless of the amount of federal funding involved.

Organizations receiving both federal and state funding should evaluate each source separately. Meeting the federal Single Audit requirements does not necessarily satisfy every state or local audit obligation.

4. A Government Contract Requires It

Some government contracts require the contractor to submit audited financial statements, compliance reports, or other information prepared under GAGAS.

Receiving payments under a government contract does not automatically create a Single Audit requirement. Under the Uniform Guidance, payments received for providing goods or services as a contractor are generally treated differently from federal awards received as a recipient or subrecipient.

However, the contract itself may still require a Yellow Book audit or another form of independent examination.

Determining whether an organization is acting as a contractor or subrecipient is therefore an important part of assessing its audit requirements.

5. A Loan or Debt Agreement Requires It

Government-backed loans, bond agreements, lender requirements, or other debt arrangements may require audited financial statements prepared under Yellow Book standards.

The organization should review the full agreement, including amendments and compliance provisions, to identify:

  • The required type of audit
  • The applicable auditing standards
  • Submission deadlines
  • Reporting requirements
  • Required recipients of the report

6. A Government or Pass-Through Agency Requires Additional Oversight

A federal agency, state agency, or pass-through entity may establish additional audit or monitoring requirements for a particular award.

This may happen because of:

  • The terms and conditions of the award
  • Program-specific regulations
  • The organization’s risk classification
  • Previous audit findings
  • Concerns identified during grant monitoring
  • Additional conditions imposed on the award

These requirements should be evaluated separately from the federal Single Audit threshold.

Does Receiving a Government Grant Automatically Require a Yellow Book Audit?

No. Receiving a government grant does not automatically mean an organization needs a Yellow Book audit.

The organization should examine:

  1. Whether the funds are federal, state, local, or a combination.
  2. Whether it is a recipient, subrecipient, or contractor.
  3. How much in federal awards it expended during the fiscal year.
  4. What the grant agreement says about audits.
  5. Whether a state, local, agency, or program-specific requirement applies.
  6. Whether another agreement, such as a loan covenant, requires GAGAS.

If the agreement states that the audit must follow “Government Auditing Standards,” “Generally Accepted Government Auditing Standards,” or “GAGAS,” it is referring to the Yellow Book.

Yellow Book Audit vs. Single Audit

Yellow Book audits and Single Audits are closely related, but they are not interchangeable.

AreaYellow Book AuditSingle Audit
Governing standardsGenerally Accepted Government Auditing StandardsUniform Guidance and Generally Accepted Government Auditing Standards
Primary authorityU.S. Government Accountability OfficeSingle Audit Act and 2 CFR Part 200, Subpart F
TriggerLaw, regulation, grant, contract, agency requirement, or other agreement$1 million or more in federal awards expended during the fiscal year
ScopeDepends on the engagement and the applicable requirementFinancial statements and compliance for selected major federal programs
Applicable organizationsGovernment entities and other organizations subject to GAGASCertain states, local governments, Tribes, higher education institutions, and nonprofits
Universal dollar thresholdNoYes
Federal Audit Clearinghouse submissionNot alwaysGenerally required

The most important distinction is that the Yellow Book establishes auditing standards, while the Single Audit is a specific audit required under federal law.

An organization may need:

  • A standard financial statement audit
  • A Yellow Book financial audit
  • A Single Audit
  • A program-specific audit
  • Another attestation or compliance engagement

The correct answer depends on the organization’s funding, expenditures, classification, and applicable agreements.

Are Yellow Book Audits Causing You Stress? We Can Help!

Contact SSL Associates, Ltd. for reliable and comprehensive audit services.

What Does a Yellow Book Audit Cover?

The exact scope of a Yellow Book audit depends on the type of engagement and the requirement that triggered it.

Financial Audits

A Yellow Book financial audit evaluates whether an organization’s financial statements are fairly presented under the applicable financial reporting framework.

The auditor may examine:

  • Account balances and financial transactions
  • Revenue and expenditure recognition
  • Financial reporting processes
  • Internal control over financial reporting
  • Compliance with applicable laws and regulations
  • Compliance with contracts and grant agreements
  • Identified or suspected fraud relevant to the audit objectives

The auditor issues an opinion on the financial statements and reports on the scope of testing related to internal control and compliance.

Organizations that do not require GAGAS may instead need a conventional financial statement audit.

Attestation Engagements and Reviews

The Yellow Book also contains standards for attestation engagements and reviews of financial statements.

An attestation engagement may examine a specific assertion, compliance requirement, schedule, internal control, or other subject matter. Depending on the engagement, the auditor may provide an examination, review, or agreed-upon procedures report.

In an agreed-upon procedures engagement, the auditor performs procedures established for a specific purpose and reports the findings without providing an opinion or conclusion. Learn more about SSAE 19 and agreed-upon procedures engagements.

Performance Audits

Performance audits evaluate how effectively or efficiently a program, department, or organization operates.

The objectives may include assessing:

  • Program results
  • Operational effectiveness
  • Economy and efficiency
  • Internal controls
  • Compliance
  • Data reliability
  • Whether public resources are achieving their intended purpose

Performance audits are commonly used by government agencies and oversight bodies to evaluate programs and inform decision-making.

What Is Examined During a Yellow Book Financial Audit?

Although every engagement is different, the process commonly includes the following areas.

Financial Statements

The auditor evaluates whether the financial statements are fairly presented in accordance with the applicable accounting framework.

Internal Control

The auditor obtains an understanding of the controls relevant to financial reporting and the audit objectives. This may include controls over:

  • Cash disbursements
  • Payroll
  • Grant expenditures
  • Procurement
  • Financial reporting
  • Approval and authorization
  • Segregation of duties
  • Information systems

A Yellow Book financial audit does not automatically provide an opinion on the effectiveness of internal control. However, the auditor reports significant deficiencies and material weaknesses identified through the audit work.

Compliance

The auditor considers applicable laws, regulations, contracts, and grant agreements that could have a material effect on the financial statements or other audit objectives.

Testing may address whether funds were:

  • Spent for allowable purposes
  • Properly authorized
  • Supported by sufficient documentation
  • Accurately reported
  • Used within the required period
  • Managed according to the award agreement

Fraud and Abuse

A Yellow Book audit is not designed to uncover every instance of fraud. However, auditors assess fraud risks relevant to the audit objectives and respond when information indicates possible fraud, noncompliance, or abuse.

What Reports Are Issued?

For a Yellow Book financial audit, the organization generally receives:

  • An independent auditor’s report on the financial statements
  • A report on internal control over financial reporting
  • A report on compliance with applicable laws, regulations, contracts, and grant agreements
  • Written communication about certain deficiencies or findings

The internal control and compliance reporting may be included in one report or issued separately.

A Single Audit includes additional reporting, such as:

  • A Schedule of Expenditures of Federal Awards
  • Reports on compliance and internal control over major federal programs
  • A Schedule of Findings and Questioned Costs
  • A summary of prior audit findings
  • A corrective action plan when findings are reported

Organizations that need a Single Audit can learn more about SSL Associates’ A-133 and Single Audit services.

How to Prepare for a Yellow Book Audit

Preparing early can reduce disruption, prevent delays, and help management address problems before fieldwork begins.

1. Review Every Award and Agreement

Create a list of grants, contracts, subawards, loans, and government programs. Review the audit clauses and reporting requirements attached to each one.

2. Determine Which Standards Apply

Confirm whether the agreement requires:

  • A standard financial statement audit
  • A Yellow Book audit
  • A Single Audit
  • A program-specific audit
  • An attestation engagement
  • Agreed-upon procedures

Do not assume the requirements based only on the organization’s total revenue or the amount of funding received.

3. Track Federal Award Expenditures

Organizations receiving federal awards should track expenditures by:

  • Federal agency
  • Program
  • Assistance Listing number
  • Award and subaward
  • Direct recipient or subrecipient status
  • Fiscal year

This information is essential for determining whether the Single Audit threshold has been met and for preparing the Schedule of Expenditures of Federal Awards.

4. Reconcile Grant Records to the General Ledger

Grant reports, reimbursement requests, award schedules, and supporting documentation should agree with the accounting records.

Differences should be investigated before the audit begins.

5. Review Internal Controls

Document how the organization approves transactions, allocates costs, monitors budgets, safeguards assets, and complies with award requirements.

Common areas to review include:

  • Cash management
  • Payroll and timekeeping
  • Procurement
  • Expense approvals
  • Cost allocation
  • Subrecipient monitoring
  • Eligibility determinations
  • Financial reporting

6. Organize Supporting Documentation

Prepare invoices, contracts, payroll records, bank statements, grant reports, procurement files, board minutes, policies, and other supporting records.

Documentation should clearly demonstrate why an expenditure was allowable and how it relates to the award.

7. Address Previous Findings

Review prior audit findings, monitoring reports, and corrective action plans. Maintain documentation showing how identified problems were resolved.

8. Engage the Auditor Early

Government and nonprofit audit schedules can fill quickly. Early communication gives the auditor time to understand the applicable requirements, confirm the engagement scope, and provide a preparation list.

How to Choose a Yellow Book Auditor

A Yellow Book audit requires an auditor with qualifications that go beyond general financial statement audit experience.

When evaluating an audit firm, consider whether it:

  • Has experience performing audits under GAGAS
  • Understands the organization’s industry and funding sources
  • Meets applicable independence requirements
  • Maintains the required continuing professional education
  • Participates in an appropriate external peer review program
  • Has experience with Single Audits when federal awards are involved
  • Can explain findings and requirements clearly
  • Has the capacity to meet the required deadline

Under the Yellow Book, auditors who plan, direct, perform procedures for, or report on GAGAS engagements generally must complete at least 80 hours of relevant continuing professional education every two years. At least 24 of those hours must relate directly to government auditing, the government environment, or the specific environment in which the audited organization operates.

What Changed Under the 2024 Yellow Book?

The U.S. Government Accountability Office issued a revised Yellow Book in 2024.

The 2024 standards are effective for financial audits, attestation engagements, and reviews of financial statements for periods beginning on or after December 15, 2025. They also apply to performance audits beginning on or after that date. Early implementation was permitted.

One important clarification is that the new quality management requirements generally apply to the audit organization, not the organization being audited.

Audit firms conducting GAGAS engagements were required to design and implement a compliant system of quality management by December 15, 2025, and should complete their first evaluation of that system by December 15, 2026.

Organizations selecting an auditor should confirm that the firm is prepared to perform the engagement under the applicable version of the Yellow Book.

Get Help Determining Your Yellow Book Audit Requirements

Determining whether your organization needs a Yellow Book audit requires more than checking a single funding threshold. You must consider the source of the funds, your role in the award, the amount expended, and the requirements included in your grants, contracts, and other agreements.

SSL Associates provides Yellow Book auditing services for government entities, nonprofits, educational institutions, businesses, and other organizations in Chicago and nationwide.

Our audit professionals can help you determine which requirements apply, prepare for the engagement, and complete the audit efficiently and accurately.

Contact SSL Associates to discuss your Yellow Book audit requirements.

Susan S. Lewis

Susan Lewis is a seasoned CPA and financial advisor with over 40 years of experience. She founded SSL Associates, offering personalized financial guidance and tailored solutions to help businesses achieve financial excellence.

Yes. A Yellow Book audit is an engagement conducted under Generally Accepted Government Auditing Standards, or GAGAS. The terms are commonly used interchangeably.
There is no universal dollar threshold for every Yellow Book audit. The requirement may come from a law, regulation, grant, contract, or government agency.The $1 million threshold applies specifically to Single Audits for fiscal years beginning on or after October 1, 2024.
Yes. A grant agreement, state requirement, contract, loan agreement, or government agency may require a Yellow Book audit even when the organization is below the federal Single Audit threshold.
It depends on the applicable requirement. Many laws, grants, and contracts require annual audits, but others may establish a different schedule or require an audit only for a particular funding period.
No. Yellow Book standards are used for government entities and may also apply to nonprofits, educational institutions, healthcare organizations, businesses, contractors, subrecipients, and other entities involved with public programs or government awards.However, the specific requirements differ based on the organization’s legal status, funding arrangement, and role.
The timeline depends on the organization’s size, complexity, readiness, number of programs, quality of its records, and whether the engagement includes Single Audit requirements.Engaging an auditor before the fiscal year ends can help establish a realistic schedule and identify missing information early.
Some Yellow Book audit reports are public because of government transparency laws, grant requirements, or filing obligations. Single Audit reporting is generally submitted to the Federal Audit Clearinghouse and becomes publicly accessible.Other Yellow Book reports may have different distribution requirements depending on the engagement and governing agreement.
Take the First Step Towards Financial Success - Contact Us Today!

Let’s transform your finances together. Schedule a consultation to unlock your path to success with our certified public accountants.

Similar Posts

Learn about Yellow Book Audits, when they’re required, and who needs them. If you need a Yellow Book Audit, contact our CPAs to ensure compliance.

Key Takeaways What Are Family Office Bill Pay Services? Family office bill pay services provide structured support for the recurring financial obligations of high-net-worth individuals...

Updated:
By:Susan S. Lewis

Learn about Yellow Book Audits, when they’re required, and who needs them. If you need a Yellow Book Audit, contact our CPAs to ensure compliance.

Key Takeaways What Is a Family Office? A family office is a dedicated team or service structure that manages the financial, administrative, and sometimes personal...

Updated:
By:Susan S. Lewis

Learn about Yellow Book Audits, when they’re required, and who needs them. If you need a Yellow Book Audit, contact our CPAs to ensure compliance.

A compilation report is a set of financial statements prepared by a CPA using information provided by you or your organization. Unlike an audit or...

Updated:
By:Susan S. Lewis

Learn about Yellow Book Audits, when they’re required, and who needs them. If you need a Yellow Book Audit, contact our CPAs to ensure compliance.

Form 990: More Than a Tax Filing Many boards treat Form 990 as a routine federal filing. In reality, it’s a public document that reflects...

Updated:
By:Susan S. Lewis

Learn about Yellow Book Audits, when they’re required, and who needs them. If you need a Yellow Book Audit, contact our CPAs to ensure compliance.

Why Revenue Recognition Feels Harder Than It Should Revenue feels simple—until timing and conditions enter the picture. Grants and donations rarely arrive without context. Some...

Updated:
By:Susan S. Lewis

Learn about Yellow Book Audits, when they’re required, and who needs them. If you need a Yellow Book Audit, contact our CPAs to ensure compliance.

Why Weak Internal Controls Develop in Nonprofits Internal control gaps usually grow from practical decisions, not negligence. Common contributing factors include: In small organizations, combining...

Updated:
By:Susan S. Lewis