Objective. Students will independently conduct a simulated records audit of a fictional small-business office—identifying misfiled, overdue-for-destruction, and missing documents—and produce a written corrective-action report.
This lesson, its worked examples and its practice questions has not yet been verified by a credentialed professional in the field or by a certification or approval body. It is a study draft and may contain errors. Do not use it as instructions for work on a job site or on live equipment. Always follow your instructor, your supervising professional, and current official references and regulations.
VoTechWorks program approval and accreditation are still in progress. Credentials are issued only by the certifying bodies named in each program, after their own exams.
A records audit is a systematic review of an organization's documents—both paper and digital—to confirm that every record is filed correctly, retained for the right length of time, and accessible when needed. Small businesses rely on accurate records for tax compliance, financial reporting, and day-to-day operations. When records are misfiled, kept too long, or lost entirely, the business risks penalties, poor decisions, and wasted time. In this lab you will step into the role of an office administrator conducting a full end-to-end audit of a fictional small-business office.
A standard records audit follows four phases:
1. Planning – Confirm the scope (which record types, which date range, which locations), gather your tools (checklist, findings log, retention schedule), and review the filing system documentation.
2. Fieldwork – Physically and digitally inspect each record against the checklist. Note every deviation: wrong folder, wrong file name, expired retention period, or missing attachment.
3. Analysis – Categorize findings, rank them by risk, and count totals by error type.
4. Reporting – Write a corrective-action report and present findings to management so problems are fixed in a logical order.
Working through all four phases in sequence keeps the audit objective and repeatable.
The retention schedule you studied in Lesson 3 is your primary authority for deciding whether a document should be kept or destroyed. For each record you inspect, compare its age and type against the schedule. If the retention period has expired, flag the document for destruction using the proper method (cross-cut shredding for paper containing sensitive personal or financial data; secure deletion or overwrite for digital files). Never discard a record that is under a legal hold or that relates to an open audit by a government agency—when in doubt, retain and note the uncertainty in your findings log.
For every error you find, record six pieces of information in the findings log:
1. Document name or description
2. Location where found (physical folder label or digital folder path)
3. Error type (use the four categories above)
4. Correct action required
5. Priority level (High, Medium, or Low)
6. Notes (any unusual circumstances)
Priority is determined by risk to the business. A missing invoice attachment that affects a pending tax return is High priority. A misfiled marketing flyer from last quarter is Low priority. After completing the log, identify the three highest-priority findings and write one sentence for each explaining the specific risk it poses.
Your two-page report is addressed to the fictional office manager. It must contain four sections:
1. Audit Scope – State the date, the number and types of records reviewed, and the tools used.
2. Findings by Category – List each error type with a count (e.g., "4 misfiled documents, 3 overdue-for-destruction records").
3. Recommended Corrective Actions – For each category, state exactly what should be done and who should do it.
4. Implementation Schedule – Propose realistic deadlines, starting with High-priority items.
Use professional business-letter or memo format. Spell out numbers below ten, use consistent headings, and proofread before submitting.
Your five-minute briefing to the class mirrors how you would report to a real manager. Open with a one-sentence summary of overall findings, then walk through each of the four report sections in order. Use your findings log as a visual aid if permitted. Speak clearly, maintain eye contact, and stay within time—being over or under by more than one minute signals poor preparation.
Even in a simulation, treat documents that contain personal names, Social Security numbers, or financial account details as sensitive. Do not photograph, copy, or share them outside the classroom. When destroying practice documents with realistic personal data, use the classroom cross-cut shredder. Digital files with sensitive content should be deleted through the software's secure-delete function, not simply moved to the recycle bin. These habits must become automatic before you enter a real workplace where GLBA and other privacy rules apply.
Answer each question, then check it. Nothing is recorded; this is your own practice.
A free tech program — complimentary, as our commitment to get America working. Help us build VoTechWorks. Tell us what works, what doesn’t, and what you want to learn.