Internal Audit

Internal audit built around agency requirements, with recommendations that improve the business.

Fannie Mae requires approved sellers and servicers to have internal audit and management controls that are independent of the operations they review. Garrett, McAuley & Co. builds and runs that program for independent mortgage bankers, and a summary of the same work can support your warehouse lenders' reviews.

Advising lenders since
2003
Mortgage companies served
600+
Banks and thrifts served
120+
Reviews a year
40 to 60

What the program covers

  • A comprehensive initial review of financial, operational, compliance, interest rate risk, systems, and servicing practices, conducted on site
  • An internal audit charter, risk assessment, audit plan, and audit schedule
  • Ongoing targeted audits, typically two or three a year, of the areas your plan calls for
  • Quality control: an audit of your pre-closing and post-closing QC program, QC plan, and oversight of any outside QC firm
  • Secondary marketing, compliance, servicing, subservicer oversight, and branch audit programs
  • Consumer compliance testing, including TRID, HMDA, and fair lending
  • An optional independent test of your BSA/AML program
  • Preparation for Fannie Mae MORA and Freddie Mac CORE reviews, and for state and CFPB exams

What the rules require

These summaries are general information, not legal advice. See the cited rule for the full text.

How it works

  1. 1A 30-minute call about your company, your agency approvals, and what your warehouse lenders ask for.
  2. 2An information request, followed by a one- or two-day on-site review of the whole operation.
  3. 3A written report, plus your internal audit charter, risk assessment, audit plan, and schedule.
  4. 4Targeted follow-up audits, typically two or three a year, each reported within 20 business days.

Talk with us about what you need.

A 30-minute call is the fastest way to see whether we are a fit. No cost, no obligation.

What you receive

  • A written report on each review, delivered within 20 business days of the visit
  • Practical recommendations, not just exceptions
  • A distilled version of the initial review your warehouse lenders can use for their annual review
Download the one-page summary (PDF) (opens in a new tab)

Why Garrett, McAuley

  • Reviewers who have run and examined mortgage companies, not generalist auditors
  • One review serves Fannie Mae, your warehouse lenders, and your board
  • Recommendations aimed at profitability and efficiency as well as compliance

Who you will work with

  • Joe Garrett

    Joe Garrett

    Co-Founder & Principal

    Joe Garrett has worked in banking and mortgage banking since 1977, mostly in FDIC-insured and OCC-regulated banks. He served on the boards of four banking institutions and as Chairman and CEO of two of them.

    LinkedIn
  • Michael D. McAuley

    Michael D. McAuley

    Co-Founder & Principal

    Michael D. McAuley became a commercial banker in 1984, specializing in mortgage warehouse lending and commercial lending. He managed the warehouse lending business for Washington Mutual and JPMorgan Chase, and he has helped commercial banks set up, assess, and improve their warehouse lending operations.

    LinkedIn
  • Steve Stone

    Steve Stone

    Managing Director

    Steve Stone has spent his career in independent mortgage banking, as an entrepreneur and as a senior operating executive. He founded and later sold an independent mortgage banking company, and he has managed loan production, servicing, secondary marketing, MSR strategy, and technology.

    LinkedIn

Common questions

Do independent mortgage bankers really need internal audit?
If you are an approved Fannie Mae seller or servicer, yes. Fannie Mae requires internal audit and management controls that are independent of the operations they review. Most independent mortgage bankers outsource it.
Can you help us prepare for a Fannie Mae MORA or Freddie Mac CORE review?
Yes. Our internal audit tests the areas those reviews focus on, including quality control, underwriting, and operational controls, so you can fix gaps before the agency arrives.
Do you help lenders prepare for state and CFPB exams?
Yes. Our compliance audits test TRID, HMDA, fair lending, and the other areas examiners review, so you can fix issues before the exam starts.
How is internal audit different from quality control?
Loan-level QC tests loans against underwriting and agency standards. Internal audit looks at the company: processes, controls, and compliance across departments, including whether the QC program itself works. Fannie Mae requires both, and Freddie Mac requires a written QC program.
Do you perform loan-level QC file reviews?
No. We audit your QC program and your oversight of the firm that performs file reviews, which keeps our work independent of the testing itself.
Do you run a fair lending regression analysis?
No. Our internal audit tests your fair lending program and controls. When you need a full statistical regression analysis, we refer it to a specialist partner.
What does an internal audit program cost?
The fee depends on your size, your channels, and how many follow-up audits you want each year. After a short call, we quote a fixed fee for the initial review and for each follow-up audit.
Who receives the report?
Your management and board receive the full report. With your approval, we also prepare a version your warehouse lenders can use for their annual review.

Send us a request

Tell us a little about your company and what you need. We reply within one business day.

Related services

Last updated November 4, 2026