Reports to those charged with governance and management

Welcome to Reporting to Those Charged with Governance and Management!

Hello there! We are diving into a crucial part of the Advanced Audit and Assurance (AAA) syllabus. Think of this chapter as the "final debrief" before the audit officially ends. While the Audit Report is for the shareholders, the communications we discuss here are for the people running the show: Those Charged with Governance (TCWG) and Management.

Don't worry if this seems like a lot of rules at first. We’re going to break it down using real-world scenarios and simple steps to make sure you're exam-ready!

1. Who exactly are we talking to?

Before we look at what we say, we need to know who we are saying it to. In the ACCA world, we distinguish between two groups:

Management: These are the people responsible for the day-to-day running of the company (e.g., the CEO or CFO).

Those Charged with Governance (TCWG): These are the people who oversee the strategic direction and accountability of the entity (e.g., the Board of Directors or the Audit Committee).

Analogy: If a company were a ship, Management is the crew making sure the engines run and the deck is clean. TCWG are the captains and owners looking at the map to ensure the ship is heading in the right direction.

2. Communication with TCWG (ISA 260)

Under ISA 260, auditors are required to communicate specific matters to TCWG. This isn't just a polite chat; it's a legal and professional requirement to ensure transparency.

What must we communicate?

You can remember the key requirements using the mnemonic "S.S.I.R.":

1. Scope and Timing: What are we auditing, and when will we be done? We discuss the planned approach and how we will handle risks.
2. Significant Findings: This is the "meat" of the report. We tell them about huge accounting errors, concerns about going concern, or issues with accounting policies.
3. Independence: For listed entities, we must confirm in writing that we (the auditors) are independent and have followed ethical requirements.
4. Responsibilities: We remind them that we are there to form an opinion on the financial statements, but Management is still responsible for preparing them.

Quick Review: Significant Findings

When reporting "Significant Findings," you should focus on:
- Qualitative aspects of accounting practices (e.g., are their estimates too optimistic?)
- Significant difficulties encountered (e.g., management refusing to give us documents).
- Material weaknesses in internal controls.

Key Takeaway: ISA 260 communication ensures that the people at the top know exactly what is happening with the audit and the company’s financial health.

3. Reporting Internal Control Deficiencies (ISA 265)

During our audit, we often find "holes" in the company's systems. ISA 265 tells us how to report these. Not every tiny error needs to be reported to the Board, but the big ones certainly do.

Deficiency vs. Significant Deficiency

A Deficiency: A control is missing or not working correctly. (Example: A junior clerk forgot to sign a small expense form once.)
A Significant Deficiency: A deficiency (or a combination of them) that is important enough to merit the attention of TCWG. (Example: No one is checking the bank reconciliations for millions of dollars.)

What goes in the "Management Letter"?

When we report these to management, we usually use a three-column format:
1. The Issue: Describe what is wrong.
2. The Consequence: Explain what could go wrong (e.g., "This could lead to fraud or material misstatement").
3. The Recommendation: Tell them how to fix it.

Did you know? Auditors don't just find problems; they provide value by helping the client improve their business through these recommendations!

4. The Form and Timing of Communication

Communication doesn't just happen at the end. It should be two-way and ongoing.

Timing: If we find a massive fraud mid-audit, we don't wait until the end of the year to say something! We report it immediately. However, the formal "Report to TCWG" usually happens during the completion stage.

Form:
- For Listed Entities, communications regarding Independence must always be in writing.
- Significant Deficiencies in internal control must always be in writing.
- Other matters can be oral (in a meeting), but the auditor must document these in the working papers.

5. Common Mistakes to Avoid

Don't worry if this seems tricky at first, but keep these pitfalls in mind for the exam:

Mistake 1: Confusing the Audit Report with the Report to TCWG.
The Audit Report (ISA 700) is a public document for shareholders. The Report to TCWG is a private letter for the directors. Don't mix them up in your essay answers!

Mistake 2: Only reporting the "Bad News."
While we focus on issues, we also communicate our planned scope and our independence confirmation. It's about the whole audit process, not just the errors.

Mistake 3: Forgetting the "So What?"
In the exam, if you identify a deficiency, you must explain why it matters. Don't just say "there is no password on the computer." Say "there is no password, which means unauthorized users could change financial data."

Summary Checklist

To master this chapter, make sure you can:
- [ ] Explain the difference between Management and TCWG.
- [ ] List the 4 main areas of communication under ISA 260 (S.S.I.R.).
- [ ] Identify a "Significant Deficiency" in a case study.
- [ ] Draft a recommendation for a management letter (Issue/Consequence/Recommendation).
- [ ] Identify which communications must be in writing (especially for listed companies).

Key Takeaway: Effective communication builds a professional relationship and ensures that significant risks are addressed before the financial statements are finalized. You're now one step closer to passing AAA!