Colo. Rev. Stat. § 24-16-107
If any agency of government is alleged to be in violation of or in material noncompliance with this article 16 or the rules promulgated by the office of the state controller, the legislative audit committee must be advised, in writing, of the activities alleged to be in violation or noncompliance. The legislative audit committee shall give notice to the agency, which shall have ten days to respond to such allegation. If the said committee thereafter determines that there is a reasonable probability of a violation or material noncompliance, the committee shall take appropriate action and may direct the state auditor to conduct an audit and review of the records being kept by such agency. If the state auditor determines that the agency has violated or has not complied or is not complying with this article 16 or the rules, a written report shall be issued to the agency detailing the areas of violation or noncompliance and curative recommendations. The agency shall implement the recommendations of the state auditor within a time period set by the state auditor not to exceed six months.
C.R.S. § 24-16-107