Why Dental Practices Fail Accounting Audits
The auditor finds problems. The findings report grows. Suddenly a routine review becomes an expensive correction project. Most of these failures are preventable.
📚 Part of our reconciliation series: This article is part of The Complete Guide to Dental Practice Reconciliation, our comprehensive resource on closing your books accurately and preventing revenue leakage.
Why Audits Happen in Dental Practices
Dental practices face various types of financial review throughout their operations. CPA reviews occur annually or quarterly when your accountant prepares tax returns and financial statements. Bank audits may be required by lenders who need audited financials before approving loans. Compliance audits from insurance carriers or regulatory bodies examine billing practices. Pre-transaction audits occur when buyers conduct due diligence before acquiring a practice. Internal audits help larger organizations verify controls across their locations.
Each type of audit looks for different things, but they share common failure patterns that trip up practice after practice. Understanding these patterns helps you avoid becoming another cautionary tale.
The Most Common Audit Failures
Unreconciled bank accounts represent the most fundamental audit failure. When bank statements do not reconcile to the books, auditors immediately question whether anything else can be trusted. Auditors commonly find outstanding items that are months or even years old, unexplained differences between bank and book balances, missing bank reconciliations entirely, or reconciliations that were completed but do not actually reconcile.
This happens when reconciliation is not performed monthly, when problems get deferred rather than investigated, when staff turnover causes loss of institutional knowledge, or when nobody has clear responsibility for the task. The consequences are severe because auditors cannot verify cash balance accuracy, revenue and expenses may be misstated, the entire control environment gets questioned, and material weakness findings often result.
Prevention requires monthly bank reconciliation completed within fifteen days of month-end with all items resolved or documented.
Revenue that cannot be verified creates serious audit concerns. When collections claimed in the practice management system cannot be traced to actual deposits, auditors become suspicious. Common findings include PMS collections exceeding bank deposits, large unidentified deposits that nobody can explain, missing ERA and EOB documentation, and adjustments without supporting documentation.
This happens when posting errors accumulate without correction, insurance payments are not matched to deposits, cash handling has weaknesses, or documentation is not retained. The consequences include potentially overstated revenue, fraud concerns, unreliable financial statements, and negative valuation implications if a sale is contemplated.
Prevention requires daily reconciliation of collections to deposits with documentation retained for every transaction.
Accounts receivable accuracy issues occur when AR on the books does not reflect reality. Auditors find old AR that should have been written off long ago, inflated AR from accumulated posting errors, credit balances improperly included as assets, and AR aging that does not make logical sense given the practice's operations.
This happens when write-off decisions get delayed indefinitely, posting errors are not corrected, AR is not reviewed regularly, or credit balances are ignored. The consequences include overstated assets, misleading collection rates, inaccurate working capital calculations, and misrepresented financial health.
Prevention requires monthly AR review, timely write-offs with documentation, and credit balance monitoring.
Inadequate documentation fails audits because records do not support the numbers. Auditors find missing invoices for expenses, adjustments without explanations, transactions without proper approval, and EOBs not retained for insurance payments.
This happens when documentation is not prioritized, filing systems are inadequate, records get lost during transitions, or staff is not trained on documentation requirements. The consequences include questioned expenses, unsupportable adjustments, control environment concerns, and additional audit procedures that increase costs and timeline.
Prevention requires a documentation policy mandating support for all transactions, an organized filing system, and a clear retention schedule.
Segregation of duties failures occur when one person controls too much of the financial process. Auditors find situations where the same person collects payments, posts them to accounts, and reconciles the bank statement. They find no oversight of financial functions, bank statements going unopened directly to the bookkeeper, and adjustments made without any approval process.
This happens in small practices with limited staff, when owners place excessive trust in long-term employees, when cost avoidance limits staffing, or when convenience is prioritized over control. The consequences are dramatically elevated fraud risk, compromised control environment, requirements for expensive compensating controls, and potential insurance implications.
Prevention requires segregating duties where possible, implementing compensating controls where segregation is impossible, and documenting the control structure.
Payroll and contractor issues involve employment and contractor classification problems. Auditors find workers misclassified as contractors when they should be employees, payroll taxes not properly remitted, compensation not properly documented, and unusual owner compensation arrangements.
This happens from misunderstanding of classification rules, intentional avoidance of employment taxes, poor recordkeeping, or informal arrangements that were never properly documented. The consequences include significant tax liability, penalties and interest, legal exposure, and operational disruption.
Prevention requires proper classification guidance from experts, timely tax remittance, and documented compensation arrangements.
Fixed asset record problems occur when equipment and improvements are not properly tracked. Auditors find assets on the books that no longer exist, assets in use that were never recorded on the books, depreciation calculated incorrectly, and disposals that were never recorded.
This happens when the asset register is not maintained, acquisitions are not communicated to accounting, disposals are not recorded, or depreciation runs on autopilot without verification. The consequences include incorrect asset values, wrong depreciation expense, tax implications, and questions about insurance coverage.
Prevention requires maintaining an asset register, annual physical verification, and a communication process for changes.
Related party transaction issues involve transactions with owners, family members, or related entities. Auditors find undisclosed related party transactions, pricing that is clearly not at arm's length, personal expenses running through practice books, and unusual arrangements with related entities.
This happens when owners treat the practice as a personal account, family arrangements are not documented, relationships are intentionally obscured, or disclosure requirements are simply not understood. The consequences include disclosure failures, tax implications, potential fraud concerns, and valuation complications.
Prevention requires identifying and documenting all related party transactions, ensuring arm's length pricing, and providing proper disclosure.
Industry-Specific Audit Failures
Insurance billing compliance is a dental-specific concern. Auditors find unbundling or upcoding patterns, services billed without supporting documentation, payments received for services not actually rendered, and unusual adjustment patterns that suggest manipulation.
This happens from aggressive billing practices, documentation shortcuts, inadequate billing training, or pressure to maximize revenue regardless of compliance. The consequences include carrier audits with recovery demands, false claims exposure, damage to practice reputation, and potential criminal liability in extreme cases.
Prevention requires compliant billing practices, documentation standards that match billing claims, and regular self-audits.
HIPAA compliance involves privacy and security requirements that auditors increasingly examine. Findings include missing or inadequate business associate agreements, security risk assessments not performed, breach notification failures, and inadequate access controls.
This happens when HIPAA is seen as low priority, requirements are not understood, compliance efforts are deferred, or there is a false sense of security about current practices. The consequences include OCR investigation and fines, reputation damage, lost patient trust, and operational disruption.
Prevention requires a HIPAA compliance program, regular risk assessments, business associate agreements in place with all vendors, and ongoing staff training.
What Triggers Deeper Investigation
Auditors dig deeper when they encounter red flags including unexplained variances that nobody can explain, defensive responses to reasonable questions, missing documentation for significant transactions, unusual patterns in the data, or resistance to providing access to records.
When these triggers occur, the audit scope expands, more testing is required, costs increase, the timeline extends, and findings are likely to multiply. Prevention requires transparency, organized records, responsive communication, and eliminating surprises before auditors arrive.
Preparing for an Audit
Before the audit begins, organize by compiling all requested documents, ensuring records are complete, reviewing for obvious issues that can be corrected, and preparing explanations for any unusual items. Review internally to confirm bank reconciliations are current, AR has been reviewed and documented, adjustments are supported, and documentation is readily available. Prepare staff by briefing them on the audit process, assigning a point of contact, and setting expectations for information requests.
During the audit, facilitate by providing requested items promptly, answering questions directly without evasion, not volunteering unrelated information that might raise new questions, and documenting what has been provided. Communicate through regular status updates, addressing questions as they arise, and escalating issues appropriately.
After the audit, address findings by understanding each finding thoroughly, developing a remediation plan, implementing fixes, and documenting corrections. Prevent recurrence by addressing root causes rather than symptoms, updating procedures, training staff on changes, and monitoring compliance going forward.
Building Audit-Ready Operations
Monthly disciplines should include bank reconciliation completed within fifteen days with all items resolved or documented and reviewed by someone other than the preparer. Revenue verification should reconcile collections to deposits with unidentified items investigated and documentation retained. AR review should examine aging, address problem accounts, and document write-offs.
Quarterly disciplines should include control review to verify segregation of duties, test key controls, and address any gaps. Documentation audit should sample transactions for supporting documentation, verify filing systems are working, and address any gaps discovered.
Annual disciplines should include asset verification through physical inventory of fixed assets reconciled to records with disposals properly recorded. Policy review should update procedures as needed, verify compliance with current requirements, and train staff on any changes.
Want to be audit-ready every day? Zeldent automates the reconciliation that auditors scrutinize most. Daily bank-to-PMS matching, documented audit trails, and exception tracking that shows you are in control. Stop cramming before audits and start operating with audit-ready discipline. Schedule a demo to see continuous compliance.
