We independently assess whether your organisation uses its resources economically, efficiently and effectively, and propose specific improvements to processes, internal control and budgetary control.
Reviewed by Controlaudit's audit team · Firm registered with the ROAC under no. S1604 · Updated 13 October 2026
A performance audit is a tool for assessing an organisation's overall performance beyond its financial information. It analyses whether resources are used efficiently, effectively and economically and whether internal processes are aligned with strategy and objectives. To do so, it reviews operating processes, internal control, organisation, decision-making and performance indicators.
It is not about verifying accounting figures but about assessing how the entity is managed and how it could work better. Our team analyses your processes and designs more effective workflows. We apply a continuous improvement approach: periodic review of operations, reduction of opportunity costs and streamlining. The result is practical, actionable recommendations to improve productivity, strengthen controls, optimise costs and support management in its strategic decisions.
In non-profit organisations and public law corporations, the governing bodies are accountable for the management of the institution. For them we prepare a management assessment report covering five areas:
As it is not an audit of accounts, the report cannot be presented as an auditor's report (art. 2.5 RLAC).
No general rule requires a performance audit, but the assessment checks specific legal obligations that apply to each type of entity.
For each entity, we also review the applicable regional legislation on foundations, associations and transparency.
Incompatibility analysis. If Controlaudit is the entity's statutory auditor, before accepting the engagement we analyse whether it is compatible with our independence. The Spanish Audit Act (Law 22/2015) considers two types of services incompatible, subject to exceptions (art. 16.1.b) LAC):
These services may only be provided if the entity assumes responsibility for the internal control system and this is stated in the contract (arts. 49 and 51 RLAC).
| Situation | Rule | What it means |
|---|---|---|
| Professional associations | Art. 11 Law 2/1974 | Annual report including financial management, a breakdown of staff costs, remuneration of the Governing Board, fees and complaints. It must be published on the website in the first half of the year |
| Public law corporations | Art. 2.1.e) Law 19/2013 | Transparency obligations in their activities subject to administrative law |
| Private entities receiving public aid | Art. 3.b) Law 19/2013 | Proactive disclosure if in one year they receive more than €100,000 in aid, or if aid accounts for at least 40% of their income with a minimum of €5,000 |
| Foundations under national jurisdiction | Art. 25 Law 50/2002 | Approval of the accounts within six months, submission to the Protectorate within ten working days and an action plan in the last three months of the financial year. Mandatory audit if two of three thresholds are exceeded: €2,400,000 in total assets, €2,400,000 in income and 50 employees |
| Associations | Art. 14 Organic Law 1/2002 | Accounting records giving a true and fair view, an inventory of assets, a minute book and annual approval of the accounts by the general assembly |
| Data protection | GDPR and Organic Law 3/2018 | The level of compliance is reviewed as part of the assessment |
| Entities whose accounts we also audit | Art. 16.1.b).3.º and 5.º LAC; arts. 49 and 51 RLAC | Prior incompatibility analysis: the entity must assume responsibility for internal control |
Management assessment for foundations and associations. It covers economic and financial management, transparency, legal compliance, data protection, information systems, governing bodies and strategy. We identify strengths and weaknesses and propose improvements.
Assessment adapted to public law corporations: annual report, transparency, management of membership fees, rules on incompatibilities and conflicts of interest, and risks for the Governing Board.
We implement budgetary control systems and monitor the budget with variance analysis. This includes control of liquidity and finance costs, ratio and balance sheet structure analysis, and assignment of responsibility for objectives.
We analyse operating and administrative processes, redesign workflows and define procedures and performance indicators to improve effectiveness and efficiency.
Together with management or the governing body, we define the objectives, the areas to be reviewed and the timetable, and we analyse incompatibilities if we are already your auditors. This is completed in one or two weeks.
We review internal documentation and interview the managers responsible for each area.
We assess processes, internal control, governance, transparency, legal compliance and information systems against good practice and indicators.
We discuss the findings with management to confirm the facts and assess whether the recommendations are feasible.
We deliver the report with prioritised recommendations, the people responsible and proposed deadlines. We present it to the governing body if requested.
If you wish, we carry out periodic follow-up of the implementation of improvements and of budgetary control, with variance reports.
An audit of accounts, governed by the Spanish Audit Act (Law 22/2015), gives an opinion on whether the annual accounts give a true and fair view. A performance audit assesses how the organisation is managed: processes, controls, governance and budget. It does not give an opinion on the accounts and its report cannot be presented as an auditor’s report (art. 2.5 RLAC).
As a general rule, no. But many entities have obligations that the assessment helps them to meet. For example, professional associations must publish an annual report in the first half of the year (art. 11 Law 2/1974), and private entities that receive certain amounts of public aid are subject to Law 19/2013 on transparency.
It depends on the scope. The Spanish Audit Act considers internal audit and the design of internal controls over financial information to be incompatible with the audit, unless the entity assumes responsibility for internal control and this is stated in the contract (art. 16.1.b) LAC and arts. 49 and 51 RLAC). Before accepting, we analyse each case and, if there is an incompatibility, we tell you.
It gives them an independent view of the state of management, with the strengths to consolidate and the weaknesses to correct. Members of governing bodies are accountable for the management of the entity, so identifying transparency, legal compliance or data protection risks in good time reduces their potential liability.
It depends on the size of the entity and the areas reviewed. As a guide, an assessment of a medium-sized entity usually takes four to eight weeks from the initial meeting to the final report. Follow-up of budgetary control can be monthly or quarterly.
It is the process of setting financial objectives, assigning responsibility, periodically comparing actual results with forecasts and correcting variances. We design the budget and the monitoring reports, establish liquidity, finance cost and profitability indicators, and train your team so that they can maintain the system.
Yes. The report is addressed to the management or governing body that commissioned it, and the information you provide is treated confidentially and in accordance with data protection legislation. You decide whether to share the report with third parties, such as financial institutions or investors.
Legislation cited on this page, linked to its official text (in Spanish):
General information updated as at 13/10/2026. It does not replace an analysis of your specific case.
Related services
Assessment of services and of the application of remuneration policies, particularly in the hotel and restaurant sector.
Professional preparation of annual accounts for companies that want to raise the quality of their financial information. As required by law, we only provide this service to entities whose accounts we do not audit.
We audit financial statements to the highest standards of quality and professional rigour.
Tell us about your situation and one of the firm’s auditors will contact you.
You decide about cookies.
We use our own necessary cookies to make the website work. With your permission, we will also use analytics cookies to understand how the website is used and advertising cookies to measure our campaigns. You can accept them, reject them or choose which ones to allow, and change your mind at any time. More information in our cookie policy.
