Audits come in several flavors, IRS tax audit, CPA financial statement audit or review, bank covenant review, buyer due diligence, workers' compensation audit, insurance audit. Each has specific focus areas, but all share a common characteristic: they examine whether the business's records match the business's claims. Well-kept books make audits routine. Poorly-kept books make audits into multi-week crises that consume owner and staff time, produce anxiety, and sometimes produce findings that lead to adjustments, penalties, or failed deals.
The insight most small business owners miss is that audit preparation is not a project you do when an audit is announced. It's a discipline you maintain year-round so that when any audit comes, planned or unplanned, the business is ready. The difference between an audit-ready business and an unprepared one isn't measured in hours of panic preparation; it's measured in whether the business operated with audit-ready discipline all year.
The Types of Audits Small Businesses Encounter
Not all audits are IRS audits. Small businesses routinely face several types.
| Audit Type | Who Conducts | Typical Trigger |
|---|---|---|
| IRS income tax audit | Internal Revenue Service | Random selection, flagged items, third-party reports |
| State tax audit | State revenue department | Sales tax, payroll tax, business tax reviews |
| Financial statement audit/review | Independent CPA | Bank loan covenant, investor requirement, contract |
| Workers' compensation audit | Workers' comp insurer | Annual audit of payroll and class codes |
| General liability audit | Insurance carrier | Annual audit of revenue or payroll for premium |
| Due diligence | Buyer or investor | M&A transaction, investment round |
| SBA or lender audit | SBA or lender | Periodic loan compliance review |
The Universal Preparation Principles
Across all audit types, certain preparation principles apply.
Clean, Reconciled Books
Every bank and credit card account reconciled through the audit period. Every account balance supported by documentation. No 'miscellaneous' entries that can't be explained. This is the foundation, without it, every other aspect of audit preparation is reactive cleanup.
Organized Supporting Documentation
Invoices, receipts, contracts, payroll records, tax filings, all organized, accessible, and complete. A folder-by-year (physical or digital) structure works. The goal is that any specific document can be produced within an hour of request.
Consistent Accounting Treatment
Revenue recognition, expense categorization, asset capitalization all handled consistently. Inconsistency is one of the most common audit findings, the same transaction type treated differently across periods raises questions and extends audit scope.
Clear Entity Structure and Tax Filings
All entities filed correctly, all elections documented (S-Corp election, Section 179, etc.), all tax returns reconciled to underlying books. Discrepancies between tax returns and the books draw attention.
Timely Response Protocols
When audit notice arrives, respond promptly and in writing. Missed deadlines extend audits; prompt professional responses close them. A designated point person (usually the CPA) should coordinate all responses.
Document Retention Requirements
Audits reach back years. Businesses need to know how long to keep what.
Tax records: 7 years (IRS), 6 years (state generally), covers most audit lookback windows including substantial understatement (6 years) and unfiled returns (no statute). Employment records: 4 years for payroll, 3 years for I-9s (plus 1 year after termination). Contracts: life of agreement plus 7 years. Bank statements and canceled checks: 7 years. Corporate records (minutes, articles, bylaws): permanent. Insurance policies: permanent for occurrence-based policies (legal claims can arise decades later). When in doubt, keep it, storage is cheap; regenerating destroyed records is expensive or impossible.
Preparing for an IRS Audit Specifically
IRS audits have particular characteristics worth understanding.
IRS Audit Preparation Essentials
- Original tax return and all supporting workpapers
- Receipts for all claimed deductions (especially over $75)
- Mileage logs with dates, purposes, and destinations
- Home office documentation (square footage, direct vs. indirect expenses)
- Vehicle logs for business use percentage
- Bank statements and credit card statements covering the audit period
- Contemporaneous documentation for meals and entertainment
- Representation through a CPA or tax attorney (don't go alone)
Common IRS Audit Red Flags
- Home office deductions without documentation
- Large charitable contributions without receipts
- Consistent losses on Schedule C (hobby loss risk)
- High meals/entertainment as percentage of revenue
- Round-number deductions (suggests estimation, not documentation)
- Foreign accounts not disclosed on FBAR
- Cash-intensive business with under-reported deposits
Financial Statement Audit Preparation
Different from tax audit, a CPA is verifying that financial statements are fairly presented.
- Trial balance and all supporting schedules through audit year-end
- Bank reconciliations for all accounts through year-end
- AR aging and subsequent collections (to verify collectability)
- AP aging and subsequent payments
- Inventory listings with valuation methodology documented
- Fixed asset register with additions, disposals, and depreciation
- Debt schedules with covenants and compliance
- Revenue recognition documentation for any unusual or deferred items
- Supporting documentation for all material estimates (reserves, allowances)
- Prior-year workpapers and adjustments available
Audit preparation is a discipline, not a project. Businesses that maintain clean, reconciled books with organized documentation year-round experience audits as routine, an information request arrives, documentation is produced, findings are minimal or nonexistent. Businesses that don't maintain that discipline experience audits as crises, multi-week scrambles to reconstruct records, anxious discussions about what can be supported, and often assessments or adjustments that could have been avoided. The discipline itself isn't hard; it's a few hours of reconciliation and filing each month. The alternative is expensive and stressful in ways the monthly discipline never is.
Create a 'permanent file' that stays current year-round, corporate documents (articles, bylaws, EIN), major contracts, lease agreements, tax elections, debt agreements, insurance policies, partnership/shareholder agreements. When any audit arrives, 80% of the foundational documents are already collected in one place. The permanent file saves dozens of hours during an audit and takes an afternoon to set up initially.
Frequently Asked Questions
Monthly bank reconciliations, done every month, on every account. If the bank reconciliations are clean, most audit preparation falls into place. If they're incomplete or inconsistent, everything else is harder. Reconciled books are audit-ready books.
Yes, in almost every case. CPAs and enrolled agents can represent taxpayers in IRS proceedings. Unrepresented taxpayers often provide information that expands the audit scope unnecessarily, miss opportunities to argue positions, or concede issues they didn't need to. The cost of representation is usually much less than the cost of avoidable adjustments.
IRS correspondence audits (by mail): 3–6 months. IRS office audits (in person at IRS): 6–12 months. IRS field audits (at the business): 9–18 months. Financial statement audits for small businesses: 4–8 weeks. Due diligence for M&A: 4–12 weeks. Timelines lengthen when records are incomplete or responses slow.
Reconstruct what you can from secondary sources (bank records, vendor copies, digital records). For genuinely missing documentation, discuss with your representative, sometimes reasonable reconstruction is acceptable; sometimes the deduction gets disallowed. Going forward, improve documentation discipline so the same gap doesn't recur.
Sources
- SMAART Company. Small Business Audit Preparation Frameworks, 2026.
- Internal Revenue Service. Audit Techniques Guides, 2025. irs.gov
- American Institute of Certified Public Accountants. Audit Preparation for Small Business, 2025. aicpa.org
- U.S. Small Business Administration. Record Retention for Small Businesses, 2025. sba.gov
Discussion
Comments
Leave a comment