Back to results for “Internal Controls Evaluation”
Auditing & Assurance › ISA Standards

What does ISA 260 and ISA 265 require regarding communication?

Intermediate

Answer

ISA 260 requires communicating with those charged with governance about the audit scope, significant findings, auditor independence, and other matters. ISA 265 requires communicating significant deficiencies in internal control identified during the audit, in writing, to management and those charged with governance on a timely basis.
Real-world example The auditor sends a management letter reporting a significant control deficiency in the payments process under ISA 265.

Common follow-ups: What is a significant deficiency? | Who are 'those charged with governance'?