Overview

This Canadian Auditing Standard (CAS) deals with the auditor's responsibility to communicate appropriately to those charged with governance and management deficiencies in internal control that the auditor has identified in an audit of financial statements.

The auditor is required to obtain an understanding of internal control relevant to the audit when identifying and assessing the risks of material misstatement. In making those risk assessments, the auditor considers internal control in order to design audit procedures that are appropriate in the circumstances, but not for the purpose of expressing an opinion on the effectiveness of internal control. The auditor may identify deficiencies in internal control not only during this risk assessment process but also at any other stage of the audit. This CAS specifies which identified deficiencies the auditor is required to communicate to those charged with governance and management. Nothing in this CAS precludes the auditor from communicating to those charged with governance and management other internal control matters that the auditor has identified during the audit.