Yellow Book

Also known as: Government Auditing Standards; GAGAS

framework · accounting · regulatory-standard

GAO's Generally Accepted Government Auditing Standards governing audits of US government entities and federal funds.

The Yellow Book — formally Government Auditing Standards, also known as Generally Accepted Government Auditing Standards (GAGAS) — is the body of auditing standards issued by the Comptroller General of the United States through the Government Accountability Office (GAO). First published in 1972 (then under the name 'GAO Audit Standards'), it has been revised approximately every five years; the current edition is the 2018 revision (effective for periods ending in 2020 and later, with amendments). Yellow Book applies to financial audits, attestation engagements, performance audits, and reviews of federal awards. It incorporates the AICPA GAAS or PCAOB AS framework for financial audits and adds GAGAS-specific requirements on independence, continuing professional education, reporting on internal control and compliance, and quality control. Yellow Book audits are required for federal grant recipients under the Single Audit Act and OMB Uniform Guidance, and for many state and local government audits.

Originators

Government Accountability Office (formerly General Accounting Office); Comptroller General of the United States (statutory issuing authority) high

Year / Decade

1972 (first edition); revised approximately every 5 years; 2018 current edition high

Primary sources

Government Accountability Office (2018). Government Auditing Standards (Yellow Book), 2018 Revision, Comptroller General of the United States (1972). GAO Audit Standards (first edition), OMB. 2 CFR Part 200 (Uniform Guidance), Subpart F — Audit Requirements high

Core components

GAGAS general standards (independence, professional judgment, competence, quality control)
Standards for financial audits (incorporating GAAS or PCAOB AS plus GAGAS additions)
Standards for attestation engagements
Standards for performance audits (planning, evidence, reporting)
Heightened independence requirements including the conceptual framework approach and specific nonaudit-services restrictions
Continuing professional education requirements (24/80 hours)
Reporting on internal control and compliance (GAGAS reports under Single Audit)

Primary use case

Audits of federal entities (alongside FASAB GAAP); Single Audits of federal-funds recipients including states, local governments, tribes, universities, and not-for-profits ($750K threshold under Uniform Guidance); performance audits by GAO, OIG (Inspectors General), and state auditors; attestation engagements over compliance with grant or contract terms.

Common criticisms

Yellow Book layering on top of GAAS or PCAOB AS produces compliance burden that small entities and their auditors find disproportionate, particularly under Single Audit
the Single Audit regime has produced persistent quality concerns documented in PCIE-PCIE peer review studies and PCAOB-style inspections of GAGAS audits, with a 2007 GAO study and subsequent assessments finding significant deficiency rates among smaller-firm Single Audits
performance audit standards have been criticized as vague relative to financial-audit standards, permitting wide variation in evidence sufficiency across state and federal audit shops
the heightened independence framework has been challenged as creating unworkable restrictions that drive smaller governmental audit work toward fewer firms
revisions to nonaudit-services rules in 2011 and 2018 produced practitioner confusion
political pressure on Comptroller General appointment and GAO funding has occasional but pointed effects on standard-setting priority.

Lineage

Siblings: GAAS, PCAOB Auditing Standards, ISA