Audit / Management letter

Management letter from the auditor: what to do with recommendations

A management letter is not an administrative attachment. It is structured auditor communication about control weaknesses, reporting risks and practical actions management should not ignore.

11.05.20267 min readAudit / Controls / Board
01
A management letter translates audit findings into practical control and reporting recommendations for management.
02
Unresolved findings can increase audit effort, create recurring adjustments and weaken governance credibility in the next reporting cycle.
03
The strongest response assigns owners, deadlines and evidence of remediation rather than a generic management comment.
Executive summary:
A management letter communicates audit findings, control weaknesses and practical recommendations. Management should respond with owners, deadlines and evidence of remediation, because unresolved points often return in the next audit.

What is a management letter?

A management letter is a written communication from the auditor to management and, where relevant, those charged with governance. It usually covers significant control deficiencies, recurring reporting issues, documentation gaps and recommendations for improvement.

Technical definition: in audit practice, the management letter supports communication of internal control deficiencies and audit observations. It is separate from the audit opinion but can influence next year's audit approach.

When does it occur?

The auditor usually issues a management letter after completing fieldwork or during closing communication. It can cover issues that do not modify the audit opinion but still matter for finance governance, audit readiness and risk management.

  • weak segregation of duties,
  • late reconciliations or unsupported manual journals,
  • inventory count documentation gaps,
  • recurring cut-off errors,
  • missing impairment, provision or deferred tax analysis,
  • insufficient evidence for management estimates.

How to prioritise findings

Management should classify findings by financial statement risk, control risk and implementation effort. A high-risk observation affecting revenue, inventory, cash, tax or going concern should not wait until the next audit season.

PriorityExampleExpected response
HighNo review of manual journals or revenue cut-off errorsOwner, deadline and evidence of control implementation.
MediumLate reconciliations or incomplete schedulesClosing checklist and review routine.
LowPresentation cleanup or documentation formatStandardised template before next audit.

What does the auditor focus on?

In the next audit, the auditor will ask whether previous recommendations were implemented. If management ignored a finding, audit testing may expand and the same matter may escalate to those charged with governance. Repeated findings can also affect audit committee discussions and the assessment of the finance function.

Related topics include audit committee questions to the auditor and qualified vs unqualified audit opinion.

Frequently asked questions

Is a management letter public?
No. It is usually confidential communication to management and governance bodies, not a document filed with the court register.
Does a management letter mean the audit opinion is modified?
Not necessarily. Many findings do not change the audit opinion but still indicate control or reporting risks that management should address.
What happens if management ignores recommendations?
The auditor may revisit unresolved matters in the next audit, expand testing and escalate repeated deficiencies to governance bodies.

Need to turn audit findings into actions?

JMFC helps finance teams prioritise management letter observations and build an audit-ready remediation plan.

Book a free consultation20 minutes • no obligation • direct statutory auditor discussionView audit services

Related JMFC services

Read next

Book a free consultation