We conducted a risk assessment of GSA’s purchase card program to identify and analyze risk of illegal, improper, or erroneous purchases related to GSA’s purchase cards. In addition, the risk assessment is used to determine the appropriate scope, frequency, and number of periodic audits of the purchase card program. We based our risk assessment on GSA’s Fiscal Year (FY) 2025 purchase card data and five risk categories: (1) high-risk transactions, (2) internal controls, (3) previous audits, (4) training, and (5) GSA Office of Inspector General Office of Investigations’ (GSA OIG Investigations’) input.
We assessed the overall risk for GSA’s purchase card program as moderate. Furthermore, it has been 9 years since we performed a full audit of GSA’s purchase card program. As a result, we are planning an audit of GSA’s purchase card program in our FY 2027 Audit Plan.
