Audit Committee Charter Guide for Accountable Boards

An audit committee charter is not a formality to approve, file, and revisit only when an auditor asks for it. It is the document that tells the board, management, and the independent auditor where financial oversight begins, who has authority to act, and how concerns move from discovery to resolution. This audit committee charter guide is designed for boards that carry real stewardship responsibilities, particularly nonprofits, public entities, housing organizations, schools, and regulated institutions.

A well-written charter gives the audit committee enough authority to perform meaningful oversight without turning volunteer directors into management or assigning them duties they cannot reasonably fulfill. That balance matters. A charter that is too general creates uncertainty at critical moments. One that is too prescriptive can become outdated when funding, regulatory requirements, or organizational structure changes.

What an Audit Committee Charter Should Accomplish

The charter should establish the audit committee as a board committee with a defined oversight role. Its central purpose is typically to support the board’s oversight of financial reporting, internal control, risk, compliance, and the independent audit process. It should make clear that management remains responsible for preparing financial statements, maintaining controls, and operating the organization.

This distinction is more than governance language. It protects the committee from assuming operational responsibilities that compromise its oversight function. For example, a committee may review management’s assessment of control deficiencies and ask how corrective actions will be monitored. It should not take over the controller’s responsibility for performing reconciliations or designing procedures.

The charter should also reflect the organization’s actual risk profile. A community-based nonprofit with several restricted grants may need a sharper focus on donor restrictions, cost allocations, and Uniform Guidance compliance. A housing authority may need explicit attention to HUD reporting, program income, procurement, and tenant-related controls. A school district or municipality may require provisions aligned with Yellow Book requirements, state oversight, and public meeting obligations.

Define Membership, Independence, and Financial Literacy

An effective charter states how committee members are appointed, how many members serve, and what qualifications are expected. Many organizations require at least three independent directors, although the right structure depends on the board’s size, governing documents, and applicable regulations.

Independence should be addressed directly. Committee members should be free from relationships that could impair objective judgment, including significant financial relationships with the organization, close family ties to senior management, or compensated service arrangements beyond ordinary board service. The charter can refer to the organization’s conflict-of-interest policy, but it should not leave the committee’s independence standard implied.

Financial expertise is equally important, though it does not always mean a committee must include a certified public accountant. At least one member should be comfortable reading financial statements, asking informed questions about estimates and liquidity, and understanding the implications of audit findings. A committee with varied backgrounds can be highly effective when members are prepared, engaged, and willing to seek clarification rather than approve reports they do not fully understand.

For smaller organizations, independence can be difficult to achieve. A founder-led nonprofit, family-affiliated foundation, or closely held business may not have a large pool of qualified outside directors. In those circumstances, the charter should be realistic about the available structure while documenting safeguards such as conflict disclosures, recusal procedures, and use of independent external advisors.

Set Clear Authority Over the Independent Audit

The most consequential provisions in an audit committee charter concern the relationship with the independent auditor. The charter should state that the committee recommends the selection, retention, compensation, and, when necessary, replacement of the audit firm to the full board. It should also establish that the auditor reports directly to the committee in its oversight capacity.

That reporting relationship does not mean the committee manages the audit engagement. It means the committee has a direct channel to the auditor and can evaluate whether the audit scope, timing, communication, and independence are appropriate.

The charter should require private executive sessions with the auditor, without management present, at least annually. These discussions give the auditor an opportunity to address sensitive matters, including management’s cooperation, disagreements over accounting treatment, control concerns, suspected fraud risks, or restrictions on audit procedures. The committee should likewise meet privately with management when circumstances warrant.

The committee should also oversee auditor independence. If the audit firm provides permitted non-audit services, the charter should address how those services are evaluated and approved. The answer is not always to prohibit all additional services. Certain services may be appropriate when properly scoped and when independence requirements are satisfied. The committee’s responsibility is to understand the nature of the work, evaluate threats to independence, and document its conclusion.

Specify the Reports and Issues the Committee Reviews

A useful charter identifies the information that comes before the committee. This prevents meetings from becoming broad financial updates with no defined oversight purpose. At a minimum, the committee should review the audit plan, the audited financial statements, required auditor communications, significant accounting policies and estimates, and any internal control findings or recommendations.

For organizations subject to a Single Audit, the charter should specifically address the Schedule of Expenditures of Federal Awards, major program determinations, questioned costs, findings related to compliance requirements, and management’s corrective action plan. The committee does not need to second-guess technical audit judgments. It does need to understand what a finding means for federal funding, future monitoring, repayment exposure, and the organization’s control environment.

For governmental entities and organizations audited under Government Auditing Standards, the committee should expect communication about compliance, internal control, and any matters reported under Yellow Book standards. The same principle applies to HUD-funded entities, healthcare providers, charter schools, and organizations with significant state or local grants: the charter should make room for the reports and compliance risks that are material to that institution.

The charter can also assign oversight of a whistleblower process, fraud-risk discussions, and related-party disclosures. These responsibilities should be tailored carefully. An audit committee may oversee how reports are received, escalated, investigated, and reported to the board, while management and legal counsel handle the underlying investigation as appropriate.

Build a Meeting Process That Produces Accountability

A charter should state how often the committee meets and what constitutes a quorum. For many organizations, meeting at least twice each year is the practical minimum: once to discuss audit planning and risk areas, and once to review the completed audit and related communications. Organizations with significant federal funding, recurring findings, complex debt arrangements, or active compliance matters may need more frequent meetings.

Meeting materials should be delivered early enough for members to review them. Minutes should reflect more than attendance and a motion to accept the audit. They should document significant topics discussed, questions raised, executive sessions held, decisions made, and follow-up actions assigned. Detailed minutes demonstrate that the committee exercised informed oversight, particularly when regulators, funders, lenders, or stakeholders later examine governance practices.

The charter should also require the committee to report regularly to the full board. A committee that receives critical information but does not communicate it clearly can create a governance gap. The report should distinguish between routine matters, significant findings, unresolved risks, and actions that require full-board approval.

Review the Charter Annually, Not Only After a Problem

Annual review is a practical discipline, not an administrative exercise. The committee should ask whether its responsibilities still match the organization’s funding sources, programs, debt covenants, reporting obligations, and current risk environment. A merger, a new federal award, a change in finance leadership, expansion into a new service line, or repeat audit findings can all justify revisions.

The review should also assess whether the committee actually followed the charter. If private meetings with the auditor did not occur, if corrective action plans were not tracked, or if members lacked the information needed to evaluate financial reporting, the answer may be better process and training rather than additional charter language.

Goldenthal & Suss Consulting PC often sees the clearest picture your board will ever get emerge during the audit process, when financial reporting, controls, compliance, and governance meet in one disciplined review. A current charter helps the board use that picture well. It gives committee members a practical mandate to ask informed questions, follow material issues to resolution, and protect the institution’s mission and resources with the level of attention they deserve.