Okoroafor Faith
Member
PENSION AND GRATUITY AUDIT
AUDITABLE AREAS AND WHAT TO CHECK
Save this it will save you in the future
If you are assigned a pension and gratuity audit, do not limit your work to checking whether retirees were paid.
The payment is only the end of the story.
As an auditor, you need to examine the entire process from the employee's service record, retirement eligibility and benefit calculation to approval, payment and post-payment monitoring.
Here is a practical audit checklist you can use.
1. EMPLOYEE AND SERVICE RECORDS
This is where I would start.
Before confirming that someone is entitled to pension or gratuity, you need to establish that the person actually worked for the organisation and that the service information used in the calculation is accurate.
What to check:
☐ Employee personal file is available and complete
☐ Appointment letter is available
☐ Evidence of assumption of duty is available
☐ Employee identification details agree across records
☐ Date of appointment agrees with the personnel records
☐ Date of retirement agrees with approved retirement documentation
☐ Length of service has been correctly determined
☐ Promotions and salary adjustments are properly supported
☐ Transfers and changes in employment status are properly documented
☐ Employee's service history is complete and consistent
☐ There are no unexplained gaps in the employee's service record
☐ Information used for pension or gratuity calculation agrees with the official personnel records
Red flag:
An employee's personnel file says one date of appointment, while the pension calculation uses another date.
That difference may look small, but it could affect the employee's entitlement.
2. RETIREMENT ELIGIBILITY
The next question is:
Was the person actually eligible to receive the benefit?
Do not assume that everyone on a retirement payment schedule is automatically entitled.
What to check:
☐ Applicable retirement rules and requirements have been identified
☐ Employee meets the applicable eligibility criteria
☐ Retirement date is properly authorised
☐ Retirement was voluntary, compulsory or otherwise classified correctly
☐ Relevant retirement documentation is available
☐ Evidence supporting the employee's eligibility is available
☐ The retirement date used in the calculation agrees with official records
☐ There are no employees included in the payment schedule who have not met the applicable requirements
☐ Any exceptions to normal retirement requirements are properly authorised
3. PENSION AND GRATUITY CALCULATION
This is one of the most important areas of the audit.
Do not just accept the figure on the payment schedule. Reperform the calculation.
What to check:
☐ Calculation is based on the applicable rules
☐ Employee's length of service used in the calculation is accurate
☐ Salary information used is supported by official records
☐ Applicable rates or percentages have been correctly applied
☐ Allowances or other components included in the calculation are valid
☐ Deductions have been correctly treated
☐ Arithmetic calculations are accurate
☐ Any adjustment to the calculation is properly supported
☐ Calculation has been independently reviewed
☐ Approved amount agrees with the amount ultimately paid
Auditor's test:
Select a sample of retirees and recalculate the entitlement independently.
Do not simply compare the final figure with the payment schedule.
4. PAYROLL AND PENSION MASTER DATA
This is where data integrity becomes important.
You want to know whether the information in the pension system or payroll system can be trusted.
What to check:
☐ Retiree's name agrees across relevant systems
☐ Employee identification number is consistent
☐ Bank account details are properly maintained
☐ Retirement status has been correctly updated
☐ Retired employees are removed from active payroll where applicable
☐ Changes to pension records are properly authorised
☐ Access to pension master data is restricted
☐ Changes to critical employee information are logged
☐ Former employees cannot remain active without appropriate explanation
☐ Duplicate employee records are identified and investigated
Red flag:
A person retires but continues receiving active employee salary without proper justification.
That deserves immediate investigation.
5. PAYMENT PROCESS
Now we get to the money.
But remember, this is only one part of the audit.
What to check:
☐ Payment is supported by approved documentation
☐ Payment agrees with the approved pension or gratuity schedule
☐ Payment was made to the approved beneficiary
☐ Bank account details were properly verified
☐ Payment was properly authorised
☐ Appropriate approval levels were followed
☐ No unauthorised manual payment was processed
☐ Payment date agrees with the approved schedule
☐ No duplicate payment exists
☐ Payment amount agrees with the approved calculation
☐ Payment is traceable from the accounting records to the bank statement
6. BANK ACCOUNT AND BENEFICIARY VERIFICATION
This is a particularly sensitive area.
You need reasonable assurance that the money went to the person who was entitled to receive it.
What to check:
☐ Beneficiary details are properly documented
☐ Bank account belongs to the approved beneficiary where applicable
☐ Changes to bank account details are independently verified
☐ Changes to beneficiary information are authorised
☐ There are controls over the creation and modification of beneficiary records
☐ Suspicious common bank accounts are investigated
☐ Multiple retirees are not being paid into the same account without legitimate explanation
☐ Dormant or unusual accounts are investigated
☐ Returned payments are properly followed up
7. APPROVALS AND SEGREGATION OF DUTIES
Ask yourself:
Can one person take a retiree from eligibility determination all the way to payment?
If the answer is yes, you have something worth examining.
What to check:
☐ Responsibilities are clearly assigned
☐ Person determining eligibility is not the sole person approving payment
☐ Calculation is independently reviewed
☐ Payment approval is appropriately separated from payment processing
☐ Changes to beneficiary information require independent approval
☐ No individual has excessive access rights
☐ Conflicting duties have been identified and addressed
☐ Approval limits are clearly defined
☐ Evidence of approval is available
9. DECEASED RETIREES AND BENEFICIARIES
This is a very sensitive area, but it is also an important control area.
What to check:
☐ There is a process for receiving information about deceased beneficiaries
☐ Death notifications are properly documented
☐ Pension payments are stopped or appropriately adjusted following verified death, where applicable
☐ Beneficiary information is properly verified
☐ Payments after death are investigated where required
☐ Overpayments are identified and followed up
☐ Any payment to an estate or beneficiary is properly supported
☐ Changes in beneficiary information are properly authorised
Red flag:
Payments continue for an extended period after the organisation has received reliable information that the beneficiary is deceased.
That requires investigation.
11. PENSION AND GRATUITY FRAUD RISKS
Do not only look for someone physically stealing money.
Fraud can happen through manipulation of records, beneficiaries, calculations and approvals.
What to check:
☐ Ghost beneficiaries
☐ Duplicate beneficiaries
☐ Fictitious employees
☐ Manipulated service dates
☐ Inflated salary information
☐ Unauthorised changes to bank account details
☐ Duplicate payments
☐ Payments to deceased beneficiaries
☐ Fictitious supporting documents
☐ Unauthorised adjustments to pension calculations
☐ Collusion between employees and beneficiaries
☐ Unusual concentration of payments around particular individuals or accounts
14. RECORD KEEPING AND DOCUMENTATION
An auditor should always ask:
“If someone challenged this payment two years from now, can we reconstruct exactly why it was made?”
What to check:
☐ Employee records are properly maintained
☐ Retirement documentation is retained
☐ Calculation sheets are retained
☐ Approval evidence is retained
☐ Payment evidence is retained
☐ Supporting correspondence is retained
☐ Changes to records can be traced
☐ Documents are easily retrievable
☐ Records are protected from unauthorised alteration
☐ Retention requirements are followed
AUDITABLE AREAS AND WHAT TO CHECK
Save this it will save you in the future
If you are assigned a pension and gratuity audit, do not limit your work to checking whether retirees were paid.
The payment is only the end of the story.
As an auditor, you need to examine the entire process from the employee's service record, retirement eligibility and benefit calculation to approval, payment and post-payment monitoring.
Here is a practical audit checklist you can use.
1. EMPLOYEE AND SERVICE RECORDS
This is where I would start.
Before confirming that someone is entitled to pension or gratuity, you need to establish that the person actually worked for the organisation and that the service information used in the calculation is accurate.
What to check:
☐ Employee personal file is available and complete
☐ Appointment letter is available
☐ Evidence of assumption of duty is available
☐ Employee identification details agree across records
☐ Date of appointment agrees with the personnel records
☐ Date of retirement agrees with approved retirement documentation
☐ Length of service has been correctly determined
☐ Promotions and salary adjustments are properly supported
☐ Transfers and changes in employment status are properly documented
☐ Employee's service history is complete and consistent
☐ There are no unexplained gaps in the employee's service record
☐ Information used for pension or gratuity calculation agrees with the official personnel records
Red flag:
An employee's personnel file says one date of appointment, while the pension calculation uses another date.
That difference may look small, but it could affect the employee's entitlement.
2. RETIREMENT ELIGIBILITY
The next question is:
Was the person actually eligible to receive the benefit?
Do not assume that everyone on a retirement payment schedule is automatically entitled.
What to check:
☐ Applicable retirement rules and requirements have been identified
☐ Employee meets the applicable eligibility criteria
☐ Retirement date is properly authorised
☐ Retirement was voluntary, compulsory or otherwise classified correctly
☐ Relevant retirement documentation is available
☐ Evidence supporting the employee's eligibility is available
☐ The retirement date used in the calculation agrees with official records
☐ There are no employees included in the payment schedule who have not met the applicable requirements
☐ Any exceptions to normal retirement requirements are properly authorised
3. PENSION AND GRATUITY CALCULATION
This is one of the most important areas of the audit.
Do not just accept the figure on the payment schedule. Reperform the calculation.
What to check:
☐ Calculation is based on the applicable rules
☐ Employee's length of service used in the calculation is accurate
☐ Salary information used is supported by official records
☐ Applicable rates or percentages have been correctly applied
☐ Allowances or other components included in the calculation are valid
☐ Deductions have been correctly treated
☐ Arithmetic calculations are accurate
☐ Any adjustment to the calculation is properly supported
☐ Calculation has been independently reviewed
☐ Approved amount agrees with the amount ultimately paid
Auditor's test:
Select a sample of retirees and recalculate the entitlement independently.
Do not simply compare the final figure with the payment schedule.
4. PAYROLL AND PENSION MASTER DATA
This is where data integrity becomes important.
You want to know whether the information in the pension system or payroll system can be trusted.
What to check:
☐ Retiree's name agrees across relevant systems
☐ Employee identification number is consistent
☐ Bank account details are properly maintained
☐ Retirement status has been correctly updated
☐ Retired employees are removed from active payroll where applicable
☐ Changes to pension records are properly authorised
☐ Access to pension master data is restricted
☐ Changes to critical employee information are logged
☐ Former employees cannot remain active without appropriate explanation
☐ Duplicate employee records are identified and investigated
Red flag:
A person retires but continues receiving active employee salary without proper justification.
That deserves immediate investigation.
5. PAYMENT PROCESS
Now we get to the money.
But remember, this is only one part of the audit.
What to check:
☐ Payment is supported by approved documentation
☐ Payment agrees with the approved pension or gratuity schedule
☐ Payment was made to the approved beneficiary
☐ Bank account details were properly verified
☐ Payment was properly authorised
☐ Appropriate approval levels were followed
☐ No unauthorised manual payment was processed
☐ Payment date agrees with the approved schedule
☐ No duplicate payment exists
☐ Payment amount agrees with the approved calculation
☐ Payment is traceable from the accounting records to the bank statement
6. BANK ACCOUNT AND BENEFICIARY VERIFICATION
This is a particularly sensitive area.
You need reasonable assurance that the money went to the person who was entitled to receive it.
What to check:
☐ Beneficiary details are properly documented
☐ Bank account belongs to the approved beneficiary where applicable
☐ Changes to bank account details are independently verified
☐ Changes to beneficiary information are authorised
☐ There are controls over the creation and modification of beneficiary records
☐ Suspicious common bank accounts are investigated
☐ Multiple retirees are not being paid into the same account without legitimate explanation
☐ Dormant or unusual accounts are investigated
☐ Returned payments are properly followed up
7. APPROVALS AND SEGREGATION OF DUTIES
Ask yourself:
Can one person take a retiree from eligibility determination all the way to payment?
If the answer is yes, you have something worth examining.
What to check:
☐ Responsibilities are clearly assigned
☐ Person determining eligibility is not the sole person approving payment
☐ Calculation is independently reviewed
☐ Payment approval is appropriately separated from payment processing
☐ Changes to beneficiary information require independent approval
☐ No individual has excessive access rights
☐ Conflicting duties have been identified and addressed
☐ Approval limits are clearly defined
☐ Evidence of approval is available
9. DECEASED RETIREES AND BENEFICIARIES
This is a very sensitive area, but it is also an important control area.
What to check:
☐ There is a process for receiving information about deceased beneficiaries
☐ Death notifications are properly documented
☐ Pension payments are stopped or appropriately adjusted following verified death, where applicable
☐ Beneficiary information is properly verified
☐ Payments after death are investigated where required
☐ Overpayments are identified and followed up
☐ Any payment to an estate or beneficiary is properly supported
☐ Changes in beneficiary information are properly authorised
Red flag:
Payments continue for an extended period after the organisation has received reliable information that the beneficiary is deceased.
That requires investigation.
11. PENSION AND GRATUITY FRAUD RISKS
Do not only look for someone physically stealing money.
Fraud can happen through manipulation of records, beneficiaries, calculations and approvals.
What to check:
☐ Ghost beneficiaries
☐ Duplicate beneficiaries
☐ Fictitious employees
☐ Manipulated service dates
☐ Inflated salary information
☐ Unauthorised changes to bank account details
☐ Duplicate payments
☐ Payments to deceased beneficiaries
☐ Fictitious supporting documents
☐ Unauthorised adjustments to pension calculations
☐ Collusion between employees and beneficiaries
☐ Unusual concentration of payments around particular individuals or accounts
14. RECORD KEEPING AND DOCUMENTATION
An auditor should always ask:
“If someone challenged this payment two years from now, can we reconstruct exactly why it was made?”
What to check:
☐ Employee records are properly maintained
☐ Retirement documentation is retained
☐ Calculation sheets are retained
☐ Approval evidence is retained
☐ Payment evidence is retained
☐ Supporting correspondence is retained
☐ Changes to records can be traced
☐ Documents are easily retrievable
☐ Records are protected from unauthorised alteration
☐ Retention requirements are followed