Skip to content

ACCA Strategic Professional · Advanced Audit and Assurance (International) · Reports to those charged with governance and management

During the audit of Oriel Pharma, the auditor identifies a significant deficiency in access controls over the general ledger. The finance director asks the auditor not to put this in writing, saying it will be fixed next month. What should the auditor do under ISA 265?

The auditor must still communicate the significant deficiency in writing to those charged with governance. A management request to withhold it or a promise to fix it later does not remove the ISA 265 requirement. Oral-only reporting is inadequate and regulator reporting is not the default.

  1. AAgree, as the deficiency will soon be corrected
  2. BCommunicate only orally, recording the conversation in the working papers
  3. CCommunicate in writing to those charged with governance regardless, as the requirement is not removed by planned remediationCorrect
  4. DReport it directly to the regulator immediately

Explanation

The requirement for written communication of significant deficiencies applies once identified during the audit; promised remediation does not remove it. Oral-only communication is insufficient, and reporting directly to a regulator is not an ISA 265 step unless law or ethics require it.

Did you get it right without looking?

One question tells you little. A timed set on Reports to those charged with governance and management shows your real accuracy, how long you take and where you lose marks.

More Reports to those charged with governance and management questions