Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 156

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 156

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 209

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 210

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 211

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 216

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 217

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 218

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 219

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 264

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 287

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 292

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 298

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 308

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 309

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 319

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 320

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 321

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 331

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 332

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 333

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 334

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 344

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 345

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 346

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 347

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 348

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 523

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 553

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 566

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 613

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 652

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 694

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 694

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 696

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 699

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 708

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 714

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 719

Deprecated: Array and string offset access syntax with curly braces is deprecated in /var/www2/dri.local/ocp/controls/imageControl/json.class.php on line 725

Deprecated: Unparenthesized `a ? b : c ? d : e` is deprecated. Use either `(a ? b : c) ? d : e` or `a ? b : (c ? d : e)` in /var/www2/dri.local/ocp/include/utils.php on line 79

Warning: session_start(): Cannot start session when headers already sent in /var/www2/dri.local/php/utils/request.php on line 2

Warning: Cannot modify header information - headers already sent by (output started at /var/www2/dri.local/ocp/controls/imageControl/json.class.php:334) in /var/www2/dri.local/templates/common/header.php on line 9
Audit Process | State Audit Institution

Audit Process

Audit process

This text describes the process implemented by the Serbian State Audit Institution when performing an audit. Text is a summary of the process, described in detail in Articles 37 through 42 of the Law on the State Audit Institution and Articles 11 through 42 of the Rules of Procedures of the State Audit Institution.


Audit Program

Institution conducts audit based on Annual Audit Program, which the Institution is obliged to adopt before the end of the year for the next calendar year.

Annual Audit Program is adopted by the Council of the Institution, based on the determined criteria for selection of the auditee.

Within the frame established by the Law, the Institution makes independent decisions on audited entities, subject, scope and type of audit, commencement and duration of audit, if not stipulated otherwise by the mentioned Law.

Annual Audit Program each year mandatory includes the following:

1. Budget of The Republic Of Serbia,

2. Mandatory social insurance organizations,

3. Appropriate number of local self-governments,

4. Operation of the National Bank of Serbia, in part relating to the usage of public funds,

5.Certain number of public enterprises, including legal entities in which a public funds beneficiary has participation in the capital.

During a calendar, the Institution may amend or supplement Audit Program.

In order to implement Audit Program, the Institution may hire auditors from state audit institutions from other countries, as well as commercial audit firms.

For the purpose of Audit Program execution, the Institution may use audit reports issued by commercial audit firms, and/or based on such reports it may plan additional procedures at auditees, where the Institution is accountable for audit statements even when using the stated reports.

Collecting Data Prior to Commencement of the Audit


Prior to commencement of the audit, competent supreme state auditor may submit to the audited entity a request for submitting data, necessary in planning and implementation of audit.

In principle, that is a list of book documents, and/or other documentation possessed by the entity, which is necessary for the auditor.

That request shall be strengthened with the warning that in case of failure to respond to such request, misdemeanor charges will be filed.
Audit Process

Audit process begins with conclusion on audit implementation, which is adopted by the Auditor General, based on the audit program, adopted by the SAI Council.

That is a very formal document, which states which entity is to be audited, what will be audited and which period shall be covered by the audit. During the audit process, that conclusion may be supplemented (expanded scope of audit, changed period covered by audit etc.).
Audited entity may submit the objection to the conclusion, and the objection shall be reviewed by SAI Council, which may reject, refuse or accept the objection as founded.

Auditor General shall issue authorization to person who will conduct an audit.
Such person shall implement audit process, aim of which is gathering sufficient adequate evidence for stating opinion on audited entity’s operations.
If, during the audit, activities or documents are revealed that point to possibility of criminal offence or misdemeanor, auditor may seize such documents for not longer than eight days.
If, during the audit procedure, audited entity does not display appropriate willingness to cooperate, Auditor General shall issue an order for submitting documents (which he needs and are unavailable), containing warning that in case of failure to comply misdemeanor charges may be filed.

Audit Report

Audit Report shall be prepared in writing, in the form of draft, proposal and report, which marks the end of the audit process. The Report shall contain elements stipulated by the International Audit Standards.

Draft and proposal of the report shall be confidential.

Draft Audit Report

Draft audit report shall be prepared after audit has been completed, and shall be delivered to the audited entity.

Audited entity has the right, within 15 days since the day of delivering the report, to file an objection with rationale.

Competent state auditor shall review the justification of objections, within 15 days since the day of receipt of objection.

Objection to the draft report may be discussed on meetings as well (there could be more than one), organized by the supreme state auditor, to which audited entities are invited. Purpose of the meeting is to remove incompliance and potential submission of new evidence.


Meeting is very formal in nature and starts with invitation; also, minutes are kept on such meeting. Several articles of the Rules of Procedure of the Serbian SAI regulate such meeting and potential situations that may arise during it.

Proposal of the Audit Report

After the last meeting, where draft report was discusses (there could be more than one), supreme state auditor shall prepare proposal of the audit report and deliver it to the audited entity (and responsible person, present and/or previous) within 30 days from the date of holding the last meeting where the discussion occurred on the draft audit report.
Proposal of the audit report shall be delivered to the members of the Serbian SAI Council.

Within 15 days following the date of its receipt, audited entity may submit objection to the proposal of the audit report, stating reasons and facts for its dispute.
Council of the Serbian SAI shall make decision on that objection, within 30 days following the day of its receipt, and the response shall be submitted to the audited entity together with the final version of the audit report.

The Council may adopt a conclusion to:

• Have the disputed findings omitted from the Audit Report,
• Make the disputed findings integral part of the report in original form,
• Make the disputed findings integral part of the report with contents set by the Council.

If necessary, Auditor General may determine that opinion of external expert be acquired on certain parts of the proposal of the report.

Audit Report (final)

The Auditor General shall adopt the audit Report. Such report may not contain audit findings not contained in the draft, and/or in the proposal of the audit report.

Misdemeanors and Criminal Offences

During the audit engagement, attention is paid at whether certain activities of audited entity have features of misdemeanor or criminal offences. In that case, Auditor General shall promptly file a request for filing misdemeanor charges, and/or criminal charges to the competent authority.


Procedure after audit has been completed

Audited entity, where irregularities or incompliance have been detected and not removed during the audit process, shall be obliged to remove them within 30 to 90 days from the day of delivering the audit report and shall submit the report to Serbian SAI on that (follow-up report). Alternatively, misdemeanor charges are filed against him/her.

Serbian SAI may perform control of information from the follow-up report, on which it prepares post-audit report. In case of unsatisfactory findings, request is sent to the appropriate authority to undertake measures against audited entity (filing charges, proposal for removing the responsible person from the position etc.). Follow-up report is a public document.