CORAA

SA 265Communication of Internal Control Deficiencies

Issued by ICAI AASB · Concluding

Reporting significant control deficiencies in writing to TCWG.

Objective

To communicate, in writing, significant deficiencies in internal control identified during the audit, to TCWG (and management).

Key requirements

  • Determination of which deficiencies are "significant"
  • Written communication to TCWG of significant deficiencies on a timely basis
  • Communication to management of other deficiencies of sufficient importance
  • Distinguished from CARO clause (xiv) internal-audit reporting and from IFC opinion

Typical procedures

  • Management Letter compiling control observations from substantive testing
  • Annexure to the SA 260 closing letter listing significant deficiencies

Common pitfalls

  • No clear severity threshold for "significant"
  • Management Letter never formally issued

SA 265 in practice

SA 265 sits in the Concluding phase of the audit. The Standards on Auditing are issued by the ICAI Auditing and Assurance Standards Board (AASB) and deemed to be prescribed by the Central Government under Section 143(10) of the Companies Act 2013. Compliance with SAs is mandatory for every audit conducted by a Chartered Accountant in India.

For authoritative text, refer to the ICAI AASB Compendium of Standards on Auditing at icai.org.

Free downloads · Working formats for SA 265

Take the working versions with you

Editable, letterhead-ready formats that put SA 265 into practice — built from the ICAI working-paper set, free to download.

Communication with TCWG / Audit CommitteeInternal Financial Controls

And when you want SA 265 executed and documented automatically — your first audit on CORAA is free.

SA 265 — frequently asked

What is SA 265 (Communication of Internal Control Deficiencies)?

SA 265 — Communication of Internal Control Deficiencies — is a Standard on Auditing issued by the ICAI Auditing and Assurance Standards Board. Reporting significant control deficiencies in writing to TCWG. To communicate, in writing, significant deficiencies in internal control identified during the audit, to TCWG (and management).

Is SA 265 mandatory in India?

Yes. Standards on Auditing are deemed to be prescribed under Section 143(10) of the Companies Act 2013, and ICAI members must comply with them in every audit of historical financial information. Non-compliance must be justified and can attract professional consequences in peer review, NFRA inspection, and disciplinary proceedings.

What should the working papers show for SA 265?

Documentation sufficient for an experienced auditor with no previous connection to the audit to understand what was done and why (SA 230). For SA 265 in the concluding phase, that means evidencing: Determination of which deficiencies are "significant"; Written communication to TCWG of significant deficiencies on a timely basis; Communication to management of other deficiencies of sufficient importance.

← Previous
SA 260Communication with Those Charged with Governance
Next →
SA 300Planning an Audit of Financial Statements