Every year, reports issued by the Office of the Auditor-General remind the country why audit quality and governance matter.
The most recent reports for financial years ending 30 June 2024 and 30 June 2025 have again highlighted recurring weaknesses in public financial management, weaknesses that offer powerful lessons not only for government institutions, but also for private companies, SMEs, NGOs, and SACCOs.
These findings are not abstract governance concepts. They are quantified, documented, and verifiable.
And they raise an important question:
If similar weaknesses existed in your organisations, would you detect them early or only when it is too late?
Recent Auditor-General Findings: The Numbers Speak
Several recent audit reports illustrate recurring control failures:
1. Talanta Stadium – KSh 10.85 Billion Unexplained Variation
In the audit of the Ministry of Defence accounts for the year ended 30 June 2025, the Auditor-General flagged an unsupported cost variation of KSh 10.85 billion relating to the Talanta Stadium project.
The contract was reportedly awarded at approximately KSh 45.85 billion, while initial approved funding stood at about KSh 35 billion, creating a significant unexplained variance.
The issue raised was not merely cost escalation, it was the lack of sufficient supporting documentation and justification for the difference.
This is a procurement governance issue.
It is a project oversight issue.
It is a control failure.
And similar risks can arise in private capital projects when contract management and cost monitoring are weak.
2. Public Universities – KSh 2.8 Billion Unsupported Expenditure
In audit reports covering the 2024/25 financial year, approximately KSh 2.8 billion in expenditure across ten public universities was flagged as unsupported due to inadequate documentation.
When transactions cannot be substantiated during audit, the concern is not necessarily confirmed loss, but lack of verifiability.
In governance terms, that is already a serious weakness.
Unsupported expenditure reflects:
- Weak documentation culture
- Poor internal controls
- Inadequate supervisory review
- Risk of misstatement or misuse
For any organisations, public or private, documentation is the backbone of audit credibility.
3. NG-CDF Bursaries – KSh 4.1 Billion Untraceable
In the report for the financial year ended 30 June 2024, the Auditor-General flagged approximately KSh 4.1 billion in bursary payments under the National Government Constituencies Development Fund (NG-CDF) that could not be properly traced to supporting beneficiary documentation.
Of this, about KSh 2.12 billion lacked adequate supporting records such as receipts or confirmation of beneficiaries.
When public funds cannot be traced clearly, confidence erodes.
But the broader lesson is this:
If your organisations cannot trace payments to verified beneficiaries or vendors, your controls are already compromised.
4. Coffee Union – Over KSh 1 Billion in Unsupported Spending
Audits covering the 2022/23 and 2023/24 financial years identified over KSh 1 billion in financial gaps at the New Kenya Planters Cooperative Union, largely linked to unsupported subsidy-related expenditures.
Again, the recurring theme was documentation and oversight.
Even sector institutions serving critical industries like agriculture are not immune when governance frameworks weaken.
The Pattern behind These Findings
Across these cases, consistent themes emerge:
- Unsupported or inadequately documented expenditure
- Weak procurement oversight
- Poor project monitoring
- Inadequate reconciliations
- Failure to implement prior audit recommendations
- Weak board and management oversight
These are not rare anomalies. They are systemic governance risks. And they are not limited to government.
What Private Organisations Must Learn
It is easy for private companies to distance themselves from public audit findings. But consider this carefully: If an external auditor asked for documentation of:
- Major procurement contracts
- Capital project cost variations
- Payroll reconciliations
- Vendor payments
- Grant disbursements
- Expense approvals
Would your organisations respond confidently and promptly?
Or would files be assembled retroactively?
Audit quality is not tested when systems are working smoothly.
It is tested when scrutiny increases.
Lesson 1: Documentation Is Non-Negotiable
Unsupported expenditure is one of the most frequent audit observations.
For SMEs and private companies, poor documentation can result in:
- Disallowed expenses
- Tax exposure
- Qualified audit opinions
- Investor hesitation
- Internal fraud risk
Documentation is not bureaucracy.
It is protection.
Strong audit quality begins with a culture where every transaction is supported, approved, and traceable.
Lesson 2: Project Oversight Requires Financial Discipline
The Talanta Stadium variation illustrates how quickly capital projects can escalate beyond approved budgets when controls are weak.
In private organisations, similar risks arise when:
- Variation orders are not reviewed independently
- Contracts are poorly structured
- Budgets are not monitored monthly
- Management overrides procurement controls
Capital expenditure without structured oversight exposes businesses to financial strain and reputational risk.
Growth must be governed.
Lesson 3: Reconciliations Prevent Escalation
Untraceable funds often stem from weak reconciliation processes. Monthly reconciliations of:
- Bank accounts
- Payables
- Receivables
- Payroll
- Project expenditures
are basic but powerful control tools. Unreconciled balances accumulate quietly until audit season, when they become major findings.
Lesson 4: Governance Is Active, Not Symbolic
Boards and oversight committees must actively:
- Review financial statements
- Monitor risk registers
- Track implementation of audit recommendations
- Challenge management decisions
Where governance becomes ceremonial, audit quality deteriorates. Tone at the top matters.
If leadership respects controls, staff follow.
If leadership tolerates shortcuts, risk multiplies.
Audit Quality Is a Strategic Asset
High audit quality builds:
- Credibility with investors
- Confidence with lenders
- Eligibility for tenders
- Operational transparency
- Organizational resilience
Weak governance, on the other hand, results in:
- Financial leakage
- Regulatory penalties
- Reputational damage
- Management instability
Audit findings do not appear overnight. They grow gradually from neglected controls.
Read also about The Future of Audit in Kenya: Building Trust, Insight, and Impact
A Direct Reflection for Business Leaders
As a director, founder, or finance manager, ask yourself:
- Are all major transactions fully documented?
- Are procurement processes transparent and competitive?
- Are reconciliations performed consistently and reviewed?
- Does internal audit operate independently?
- Are prior audit findings implemented promptly?
If recent public findings involving billions in unsupported expenditure teach us anything, it is this:
Weak systems eventually surface. The amounts may differ. The sector may differ. But the governance principle remains the same. Strong controls prevent costly surprises.
Moving from Reaction to Prevention
Organisations should not wait for external audit findings to trigger reform.
Proactive governance includes:
- Periodic internal control reviews
- Independent internal audit functions
- Clear segregation of duties
- Strong documentation frameworks
- Regular board oversight
- Continuous risk assessment
Audit quality is not achieved at year-end. It is built daily, transaction by transaction, decision by decision.
So then;
The recent quantified findings
KSh 10.85 billion unexplained project variation,
KSh 2.8 billion unsupported university expenditure,
KSh 4.1 billion untraceable bursaries,
Over KSh 1 billion in unsupported cooperative spending;
are not just headlines. They are governance lessons.
They remind us that audit quality is not about satisfying regulators.
It is about safeguarding resources, protecting leadership, and strengthening institutional integrity. Whether you operate in the public or private sector, the message is clear:
Strong governance is not optional.
And the cost of weak governance is always higher than the cost of doing things right.
Contact us today on audit@aura-cpa.com, call us on 0769 111000 for more info. You can also visit us at Haven Court, 1st Floor, Waiyaki Way, Westlands, Nairobi.