Stackroom

How to do an asset audit

What an audit has to produce to satisfy someone external, how to scope it so it does not consume a week, and what to do with the discrepancies.

7 min read

An asset audit must produce a verified count: the scope, the date, the named counter, each item recorded verified or missing, a sign-off and the actions arising. Scope it to a location or department and repeat through the year rather than attempting the whole estate at once.

An asset audit is a verified count: what you have confirmed is present, on a date, by a named person, with the discrepancies recorded. That is a different claim from your register, which is what you believe you have — and only the first one satisfies anybody external.

What the audit has to produce

Before starting, know what the output must contain. Finance, an insurer, a funder and a regulator all want broadly the same artefact:

  • The scope — what was counted, and explicitly what was not.
  • The date it was carried out.
  • The person who carried it out, and a sign-off.
  • Verified items — confirmed physically present.
  • Discrepancies — expected but not found, or found but not expected.
  • Actions arising, and what happened to them.

If your tool produces a number but not a document, you will end up building the document by hand — which is where both the time and the errors come from.

Scope it so it survives

The instinct is a full annual inventory. It is the reason audits get postponed: it needs a block of time nobody has, so it slips until it is urgent and then gets done badly.

Cycle counting scopes to one location, category or department and runs in an afternoon, repeatedly through the year. Over twelve months the coverage is identical, no single week is consumed, and — this is the real benefit — discrepancies surface while they are recent enough that someone remembers what happened.

  • ApproachAnnual full count
    EffortA week, all at once
    Discrepancy age when foundUp to 12 months — usually unrecoverable
  • ApproachQuarterly by department
    EffortA day per quarter
    Discrepancy age when foundUp to 3 months
  • ApproachMonthly by location
    EffortAn afternoon
    Discrepancy age when foundWeeks — often still recoverable

Running the count

  1. 1
    Freeze nothing

    Do not stop operations. A count that requires the business to pause will be scheduled into a quiet week that never arrives. Count live and reconcile the movements.

  2. 2
    Walk and scan

    Scan each item where it is, marking verified as you go. On a phone this is one pass; on a clipboard it is a pass plus a data-entry session, which is where the errors enter.

  3. 3
    Record missing as you go

    Do not leave gaps to interpret later. An item not found is a result, not an omission, and recording it in the moment is what makes the follow-up list real.

  4. 4
    Close with a sign-off

    A signature and a note. This is what turns a count into a document somebody can file.

The discrepancies are the point

A count that produces a number and no actions has cost you a day and changed nothing. Each discrepancy should resolve into one of a small set of outcomes:

  • Found elsewhere — the register was wrong; correct the location and ask why it drifted.
  • In someone's custody — it was issued and not recorded, or recorded and not scanned. A process gap worth understanding.
  • Genuinely missing — write it off, and note where and when it was last seen. That pattern is data.
  • Should not have been in scope — retired, sold or transferred. Clean the register.

The fourth category is usually larger than expected on a first audit, and clearing it makes every subsequent count faster.

Look at where discrepancies cluster rather than at the total. One location or one category accounting for most of them tells you where the process is broken — which is worth far more than the write-off figure.

Frequently asked questions

What does an asset audit need to produce?

Scope, date, the person who carried it out, per-item verification, recorded discrepancies, a signature at close, and what happened to the findings. A register export contains none of these because nothing in it was physically checked.

How often should asset audits be done?

Annual coverage of the estate, achieved through rolling cycle counts by location or department. That finds discrepancies while they are recent enough to explain and avoids losing a week to a single sweep.

Who should carry out an asset audit?

Somebody other than the custodian of what is being counted, wherever the organisation is large enough to allow it. Self-verification is the first thing a reviewer questions.

What do you do with audit discrepancies?

Resolve each into one of four outcomes: found elsewhere, in somebody's custody, genuinely missing, or out of scope because it was disposed of and never closed. Where discrepancies cluster tells you more than the total does.