Auditing and Ethics · Ethics and Terms of Audit Engagements

Audit Engagement Letter and Its Contents under SA 210

Updated 4 October 2026 · Fact-checked

An audit engagement letter is a written agreement between the auditor and the entity's management or those charged with governance, as required by SA 210. It records the objective and scope of the audit, responsibilities of both sides, the reporting framework and the expected form of reports. In exams, list these contents with reasons.

Understand Audit Engagement Letter and Its Contents

Before an audit starts, the auditor and the client must agree on what the audit will and will not do. The audit engagement letter puts this agreement in writing. SA 210, Agreeing the Terms of Audit Engagements, deals with it.

Why does it matter? Clients often expect an audit to find every fraud or to cover things like tax advice. A written letter removes this gap in expectations. It also protects both sides. If a dispute arises later, the letter shows what was agreed.

The letter is sent after the auditor decides to accept or continue the engagement and after the preconditions for an audit are met. The two key preconditions are that management uses an acceptable financial reporting framework and that management agrees to its responsibilities. The letter is addressed to management or those charged with governance, as appropriate.

The letter must cover the objective and scope of the audit, the auditor's responsibilities, management's responsibilities, the applicable financial reporting framework, and the expected form and content of reports. It may also include extra items such as fees, timing, access to records, and arrangements involving other auditors or experts.

In a statutory audit, law already fixes many terms. Where law or regulation prescribes the terms in sufficient detail, the letter may simply refer to the law and need not restate those terms. But the auditor still records in writing any terms the law does not cover, such as the expected form of reports and other agreed matters. The letter should be agreed before the audit work begins.

Key rules to remember

Mandatory contents of the letter (SA 210): Objective and scope of audit + Auditor's responsibilities + Management's responsibilities + Identification of applicable financial reporting framework + Expected form and content of reports; Remember these five heads. They are the core of any answer on contents.
Management's responsibilities to be acknowledged: Prepare financial statements in line with the framework + Maintain internal control needed for preparation free from material misstatement + Give auditor access to all relevant information, additional information requested, and unrestricted access to persons; Management must agree to these before the audit proceeds. This is the basis on which the audit is conducted.
Expected form of reports: Reference to the expected form and content of the auditor's report + Statement that the actual report may differ from the expected form; Circumstances may require a different report, so the letter should say the actual report can differ.
Preconditions for an audit: Acceptable financial reporting framework + Management's agreement to its responsibilities; If a precondition is absent, discuss the matter with management. The auditor shall not accept the engagement if the framework is unacceptable, unless required by law to do so. In that case the audit is not an SA-compliant audit, and the auditor's report must not say it was conducted in accordance with SAs. The auditor also shall not accept the engagement if management does not agree to its responsibilities.

How to solve Audit Engagement Letter and Its Contents questions

Use this order for any question on the engagement letter, whether it asks for contents, importance or a scenario.

1Identify what is asked: contents, purpose, who receives it, or a change in terms.
2State that SA 210 requires terms of the engagement to be agreed and recorded in writing in an engagement letter or other suitable written form.
3Check the preconditions: acceptable reporting framework and management's acknowledgement of its responsibilities.
4List the contents in a clear order: objective and scope, auditor's responsibilities, management's responsibilities, framework, expected form of reports.
5Add other items if the question mentions them, such as fees, timing, use of experts or other auditors.
6Apply the facts of the case to each point and give a conclusion in one line.

Quickest way: Five-head list for MCQs and written answers

When to use it: Use when a question asks for contents or importance and time is short.

For MCQs, spot the odd option. Items like the auditor guaranteeing fraud detection or management avoiding responsibility are never in the letter.
Remember the five heads: Objective and scope, Auditor's duties, Management's duties, Framework, Form of reports.
For written answers, write one line per head with a short explanation. This earns a step mark each.
Close with one line on why it matters: it avoids misunderstanding and records agreed terms.
If the case involves a change of terms, note that the auditor needs reasonable justification before agreeing to a change.

Common mistakes in Audit Engagement Letter and Its Contents

Saying an engagement letter is not needed for a statutory audit because the law fixes the terms.
Students think the Companies Act covers everything.
Fix: State that SA 210 still requires agreed terms in writing. Where law prescribes terms in sufficient detail, the letter can just refer to the law, but terms the law does not cover, such as the expected report form, must still be recorded.
Addressing the letter to the wrong party.
Students assume it always goes to the owner or the auditor's partner.
Fix: It is addressed to management or those charged with governance, as appropriate to the entity's circumstances.
Leaving out management's responsibilities.
Students focus only on what the auditor does.
Fix: Always include preparing financial statements, internal control, and giving access to information and people. The audit proceeds on this basis.
Writing that the letter guarantees the form of the final report.
Misreading 'expected form and content of reports'.
Fix: Say the letter states the expected form, and that the actual report may differ depending on audit findings.
Confusing the engagement letter with the management representation letter.
Both are letters between auditor and management.
Fix: The engagement letter is agreed at the start and sets terms. The representation letter (SA 580) is obtained near the end to confirm representations.
Ignoring the need for a new letter or reminder in recurring audits.
Students assume one letter lasts forever.
Fix: The auditor may decide not to send a new letter each period, but should consider whether circumstances need terms to be revised or the client reminded of existing terms.

Worked examples

Example 1

Your firm is appointed statutory auditor of a manufacturing company. The CFO says an engagement letter is unnecessary because the Companies Act already defines the auditor's duties. Advise with reference to SA 210 and list the main contents of the letter.

Show the solution

SA 210 requires the auditor to agree the terms of the engagement with management or those charged with governance and record them in an engagement letter or other suitable written form.
The law fixes many duties. Where it prescribes them in sufficient detail, the letter may refer to the law instead of repeating those terms. But the terms must still be agreed and recorded, and any terms the law does not cover must be written down. The letter clarifies scope, responsibilities and reports, and avoids misunderstanding.
Main contents: (1) objective and scope of the audit; (2) responsibilities of the auditor; (3) responsibilities of management; (4) identification of the applicable financial reporting framework; (5) reference to the expected form and content of the auditor's report, with a statement that the actual report may differ.
Other items may include fees and billing, timing, access to records and arrangements with experts or other auditors.

Answer: The CFO's view is not correct. Under SA 210 the terms must be agreed and recorded in writing even for a statutory audit. The letter may refer to the law for duties it prescribes in sufficient detail, but must record the other terms: objective and scope, auditor's responsibilities, management's responsibilities, the reporting framework, and the expected form of reports.

Example 2

Choose the correct statement. Which of the following is NOT a normal part of an audit engagement letter? (A) Management's responsibility to give the auditor access to all relevant information (B) Identification of the applicable financial reporting framework (C) A guarantee that the audit will detect all frauds (D) Reference to the expected form and content of the auditor's report

Show the solution

Option A is a standard management responsibility in the letter.
Option B is a required content: the framework used for the financial statements.
Option D is required: the expected form of reports.
Option C is wrong. An audit gives reasonable assurance, not a guarantee, because of inherent limitations. No letter would promise to detect all frauds.

Answer: Option C is not part of an engagement letter.

Exam tips

For a 'state the contents' question, write the five heads first, then add other items. This secures most step marks.
If a scenario shows a client wanting the auditor to skip the letter or limit scope, link your answer to SA 210 and the preconditions.
Distinguish clearly between the engagement letter (SA 210) and the representation letter (SA 580) in short notes.
In MCQs, reject any option promising absolute assurance, fraud guarantees or removing management's responsibilities.

Practice questions from Ethics and Terms of Audit Engagements

Audit Engagement Letter and Its Contents in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Audit Engagement Letter and Its Contents: frequently asked questions

What is an audit engagement letter?

It is a written agreement between the auditor and management or those charged with governance. It records the agreed terms of the audit, including scope, responsibilities, reporting framework and expected reports. SA 210 deals with it.

Why is an engagement letter important in an audit?

It avoids misunderstanding about what the audit covers and who is responsible for what. It also acts as evidence of the agreed terms if a dispute arises. It protects both the auditor and the client.

Is an engagement letter required for a statutory audit?

Yes, the terms must be agreed and recorded in writing under SA 210, even when law sets many of the duties. If law prescribes the terms in sufficient detail, the letter may just refer to the law. Terms the law does not cover, such as the expected report form, must still be recorded.

Do I need a new engagement letter every year?

Not always. In recurring audits the auditor decides whether circumstances require the terms to be revised and whether to remind the entity of the existing terms. If terms change, a new or revised letter is needed.