Before communicating planned scope and timing, the auditor establishes engagement terms addressing the audit objective and the respective responsibilities of management and the auditor. For an issuer, that understanding is established with the audit committee and recorded in an engagement letter.
The subsequent planning communication explains the intended strategy and timing. It allows those charged with governance to challenge assumptions, discuss significant risks, and contribute relevant information before those assumptions shape audit work.
- Management: The people directing operations prepare the financial statements, maintain internal control, and provide records, explanations, and access.
- Governance: The people overseeing strategic direction and accountability supervise financial reporting, including management's conduct of that process.
- Auditor: The independent practitioner obtains reasonable assurance, meaning high but not absolute assurance, about freedom from material misstatement and expresses an opinion.
The auditor coordinates records, personnel availability, and site access with management while discussing oversight matters with those charged with governance. Sending the controller a fieldwork calendar alone does not accomplish the auditor's required communication with those charged with governance.
Common mistakes
- Wrong recipient. Sending Norvale's controller the October calendar leaves all three directors uninformed about the planning overview and significant risks.
- Unusable schedule. A row reading “inventory, December 31” identifies neither the information owner nor the count instructions needed before attendance.
- Fixed deadline assumption. Treating February 18 as guaranteed suppresses the dependency on sufficient evidence, completed statements, and required reviews.
Bottom line
- Engagement terms establish the objective and responsibilities; planning communication explains intended scope, timing, significant risks, and broad responses.
- Management coordinates information and access, while those charged with governance provide oversight and relevant knowledge.
- Nonissuer recipients depend on governance arrangements; issuer communications go to the audit committee or the board serving that function.
- The planning overview supports useful dialogue without revealing details that compromise audit effectiveness.
Exam shortcut
Identify the regime and recipient first. A controller, board subgroup, and issuer audit committee are not interchangeable recipients. For a presentation task, trace each risk across the response, owner, information request, and milestone. Correct missing links before polishing wording. When governance supplies new information, isolate the changed fact, identify the affected period or area, and revise the relevant plan entries.
The full lesson (about 4,652 words, 31 min read) adds 2 worked examples, all 5 common mistakes, a self-check, free in the app.
Learning objectives
- I.F1
Browse all free CPA AUD lessons or jump into free CPA AUD practice questions.