Insight · Audit & Compliance

The Public-Sector HR Audit: A Practitioner's Checklist for County and City HR Directors

By Tabitha McKenney Weinstein · April 28, 2026 · 8 minute read

An HR audit is the most useful diagnostic a public-sector HR function can run on itself. Done well, it surfaces the failures that always show up later in a grievance, an EEO complaint, or a legislative hearing. Done poorly, it produces a tidy binder that does not change anything. This guide is for HR Directors, County Administrators, and City Managers deciding whether to commission one, and for the elected officials who have to approve the budget for it.

Why audits matter now

Three pressures are converging on public-sector HR functions that did not exist five years ago. First, recruitment in mission-critical roles has not recovered post-pandemic. Counties that took eight weeks to fill a vacancy in 2018 now take twenty or more. Second, pay transparency statutes in Maryland, Virginia, and a growing list of states have shifted the legal floor under compensation decisions. Third, regulatory enforcement around classification, FLSA exemption, and pay equity has intensified at both federal and state levels.

Each of these pressures lands on the HR Director's desk eventually. The question is whether they land while the function has the diagnostic clarity to address them or whether they land in the form of a complaint, a citation, or a Board of Supervisors meeting that did not need to happen. An HR audit is the disciplined way to identify the gap before it becomes a crisis.

What an HR audit actually examines

A real HR audit covers more ground than most leaders expect. The eight functional areas every meaningful audit touches:

• Classification structure. Whether positions are classified consistently with the work performed; whether the classification series is internally coherent; whether the structure can survive grievance review.
• Compensation administration. Pay range design, market position, internal equity, compression, range refresh discipline, and the documentation behind individual pay actions.
• FLSA status. Exemption determinations against the duties test, salary basis test, and salary level test under 29 CFR Part 541. Misclassification under FLSA is the highest-stakes single finding in any audit.
• Recruitment and selection. Hiring cycle time, requisition workflow, selection methodology, eligibility list management, and the documentation that connects qualifications to hiring decisions.
• EEO and discrimination compliance. Title VII, ADA, age discrimination, complaint intake and investigation procedures, and the recordkeeping that makes outcomes defensible.
• Policy and SOP administration. Whether written policies match actual practice; whether policies have been reviewed against current law; whether front-line managers know which policy applies in which situation.
• HRIS data integrity. Whether HRIS records reconcile against authoritative source data; whether classification, pay, and demographic records are accurate; whether reports drawn from the system can be trusted.
• Training and succession planning. Compliance training delivery and completion; manager capability development; identification and development of successors for critical positions.

Audits scoped to fewer than these eight areas are not HR audits; they are reviews of specific functions. That is a legitimate scope choice, but it should be named accurately.

Three audit depth levels

The same eight functional areas can be examined at three depth levels. The depth determines what the audit produces and what it costs.

Executive scan (roughly $8,000 to $15,000)

Two to three weeks of work. The auditor reviews documentation, interviews the HR Director and a small set of stakeholders, and produces a one-page summary per functional area plus an executive briefing. Findings are diagnostic, not exhaustive. The deliverable is a short report identifying the highest-risk areas and the depth of follow-up each warrants. Useful for a new HR Director or a Board that needs to understand exposure quickly. Not sufficient for actually closing gaps.

Focused review (roughly $20,000 to $40,000)

Six to ten weeks of work. The auditor examines documentation, interviews stakeholders across HR and operating departments, samples records, and produces a written analysis per functional area with prioritized recommendations. The deliverable supports management decision-making and gives the County or City a defensible position when challenged. Most local government HR audits fall in this range.

Comprehensive audit (roughly $45,000 to $90,000+)

Twelve to twenty weeks of work. The auditor examines all documentation, conducts position-by-position review for classification and FLSA, runs statistical analysis on compensation patterns including pay equity by protected category, and produces a full written report with implementation roadmap. Appropriate when the County or City has had a recent legal or compliance event, faces material recruitment difficulty, or needs a documented foundation for a multi-year HR transformation.

The eight categories of findings every audit produces

The functional areas above are what the auditor examines. The categories of findings are what the auditor reports back, ranked by typical risk:

• Classification documentation gaps. Position descriptions that do not match actual work, classification rationales that were never written down, reclassifications without paper trail.
• FLSA exemption errors. Positions classified as exempt that fail the duties test under current Department of Labor standards. The most expensive single category of finding because back-pay liability runs two or three years.
• Pay range compression and decompression. Adjacent grades with insufficient differentiation; supervisors paid at or below their highest-paid direct report; pay structures that have not been refreshed in five-plus years.
• Recruitment process failures. Hiring cycle time exceeding industry benchmarks; selection methodologies that cannot be defended against challenge; eligibility lists that go stale before they are used.
• EEO recordkeeping deficiencies. Complaint intake without consistent documentation; investigation procedures that vary by who handles them; outcomes that do not track to a written standard.
• Policy drift. Written policies that no one follows; practices that no one wrote down; managers who learned what to do from someone who learned it from someone else.
• HRIS data quality issues. Position records that conflict with HRIS records; pay records that do not reconcile; demographic data with material gaps.
• Succession risk. Critical positions with no documented successor; senior staff whose departure would leave undocumented institutional knowledge unrecoverable.

Public-sector overlays that distinguish your audit

A good HR auditor with private-sector experience will miss several things that matter materially in the public sector. The overlays your audit should explicitly address:

Merit system and civil service compliance

Merit principles govern hiring, promotion, and discipline in most public-sector jurisdictions. The audit should test whether actual practices align with merit system requirements, not just with internal policy. Classification decisions, in particular, are subject to merit-based review that has no private-sector analog.

Constitutional Officer staff (Virginia and other states with Constitutional Officers)

Sheriff, Treasurer, Commissioner of Revenue, Circuit Court Clerk, and similar officers operate under hybrid state-and-local authority. Audits must address whether classification authority is appropriately vested, whether state pay plans are correctly applied, and whether local supplements are documented as policy decisions rather than personality-driven.

Collective bargaining environments

Audit findings affecting represented positions are inputs to the next bargaining cycle, not unilateral implementation directives. The audit should document the collective bargaining context for each finding and frame recommendations accordingly.

FOIA and Freedom of Information Act exposure

Audit deliverables produced for public-sector clients may become subject to disclosure under the Virginia Freedom of Information Act, the Maryland Public Information Act, or equivalent statutes. The auditor should write deliverables in awareness of this possibility, marking pre-decisional working papers clearly and writing final deliverables in language appropriate to public review.

Constitutional protections for public employees

Public-sector employees have due process protections in employment actions that private-sector employees generally do not. Audit findings that recommend disciplinary or termination actions must be framed in awareness of the procedural standards those actions require.

What separates a good audit report from a bad one

The audit report is the deliverable. Three tests separate a useful report from a binder:

Defensibility

Every finding cites the documentary or interview evidence that supports it. Recommendations are tied to specific findings. The reader can follow the methodology from data to conclusion without external explanation. A reasonable hearing officer reading the report three years later could reconstruct what the auditor saw and why the recommendations were made.

Prioritization

Findings are ranked by risk and recommended sequence. A report listing forty-two findings in random order is less useful than a report with eight critical findings, fifteen significant findings, and a roadmap for addressing the rest. Public-sector HR functions are resource-constrained; the report should respect that constraint by helping leadership decide what to do first.

Implementation specificity

Recommendations are specific enough to act on. "Improve classification documentation" is not actionable. "Conduct a structured classification review of the eighteen positions identified in Appendix C using the five-factor methodology described in Section 3, with documented rationale and FLSA determination per position" is actionable. The difference is whether the report changes anything after it is delivered.

Real audits expose the things you have been hoping no one would examine closely. The discipline of doing one before someone else forces the issue is what separates HR functions that hold up under pressure from HR functions that look fine until pressure arrives.

When to do it yourself versus when to bring in outside help

HR Directors with strong staff and recent practice can run an executive scan internally. Two conditions need to hold: the staff has the methodology depth to ask the right questions, and the HR Director has the political standing to surface findings that may be uncomfortable. Where one or both conditions are absent, internal audits tend to confirm what leadership already wanted to believe rather than challenge it.

Outside auditors bring three things internal teams cannot. First, methodology refined across multiple jurisdictions. Second, the political distance to surface findings without interpersonal cost. Third, the cited credibility that makes findings carry weight in subsequent legal or grievance proceedings. The outside auditor's report is harder for an affected employee, an arbitrator, or a hearing officer to dismiss as self-interested.

The decision is rarely either-or. A common pattern: internal staff conducts the executive scan; outside auditor conducts the focused review or comprehensive audit on the areas the scan flagged.

What happens after the audit

Audits that produce binders without changing anything are common. Audits that change something share three characteristics:

• Findings translate into a written implementation plan with named owners, deadlines, and decision authority. Without this step, recommendations live in a folder.
• The Board, Council, or governing body receives a structured briefing that requires leadership decisions on the priority findings. Without this step, HR alone cannot drive cross-functional change.
• Progress is tracked against the implementation plan with quarterly review for the first year. Without this step, the urgency that motivated the audit dissipates.

The audit itself is the easy part. Implementation is where most public-sector HR functions falter. A good audit anticipates the implementation challenge and produces a deliverable that supports it.

How Pinnacle approaches HR audits

Pinnacle Workforce Consulting LLC conducts HR audits at all three depth levels with methodology documented in the firm's Methodology Manual. Audits incorporate federal authority benchmarks (OPM Position Classification Standards, Title 5 USC Chapter 51, FLSA and 29 CFR Part 541, MSPB precedent), industry methodology (WorldatWork Total Rewards Framework, IPMA-HR public-sector classification guidelines, EEOC and OFCCP frameworks), and the firm's own discipline on documentation, defensibility, and implementation specificity.

Engagements are personally led by the Principal Advisor with HRCI Compensation Pro-certified Associate Advisors supporting specific scope areas. The Principal has twenty-five years inside Maryland public-sector HR, including ten years at a 9,000-employee state agency under legislative oversight, inspector general review, and active collective bargaining. Methodology has been tested in promotional grievance hearings where documentation was examined under cross-examination.

← Back to Insights