Management Representation Letter: How to Draft and Tailor One for an Audit File

The representation letter is usually the last item collected in an audit, and it is often built from a stale template. A letter that lists matters irrelevant to the client, or omits matters the file raised, tells the reviewer that nobody read it. This guide gives a drafting method you can run on every engagement. The requirements themselves are summarized on the AU-C 580 standards page.

Start from the two representations that are always required

Every letter carries two statements, whatever the client does.

1. Management acknowledges its responsibility for the preparation and fair presentation of the financial statements in accordance with the applicable framework, as set out in the engagement letter.
2. Management has given the auditor all relevant information and access agreed in the engagement terms, and all transactions are recorded and reflected in the financial statements.

If management will not give either one, the letter is not a drafting problem. The auditor cannot obtain sufficient evidence to form an opinion, and the response is a disclaimer or withdrawal rather than a qualified opinion. Plan for that conversation early, not at the signing meeting.

Build the add-on paragraphs from the file, not from the template

Each other AU-C section that asks for a representation needs a matching paragraph only when it applies. Walk the file in this order and keep a paragraph only if you can point to a workpaper that supports it.

Then add client-specific items the audit surfaced: intent and ability to hold a security to maturity, classification of debt as long term, the existence of side agreements, unrecorded commitments, or title to assets pledged as collateral.

Worked example: a mid-size distributor

Take an illustrative client, a regional building-products distributor with a December year end. The auditor's file shows these facts: a $412,000 allowance for doubtful accounts, an inventory reserve for slow-moving stock, a line of credit with a financial covenant that the client met, a lawsuit over a delivery contract with outside counsel's response in the file, two uncorrected misstatements totalling $38,000 (both below materiality), and a loan from the owner's family trust.

The tailored letter keeps the two standard statements and the standard fraud, noncompliance, related party and subsequent events paragraphs. It then adds:

• An estimates paragraph naming the allowance and the inventory reserve, stating that management believes the methods, data and assumptions are appropriate.
• A litigation paragraph stating that management has disclosed all claims and has no knowledge of unasserted claims that require disclosure. It references the one lawsuit.
• A debt paragraph stating the covenant is met at year end and no waiver is outstanding.
• A related party paragraph that names the family trust loan, the terms and the interest accrued.
• A misstatement paragraph that attaches the summary and states management's belief that the $38,000 aggregate effect is immaterial to the financial statements.

Everything else in the generic template, the paragraph about securities investments, the one about third-party inventory held on consignment, the one about a defined benefit plan, comes out. A letter that lists a pension plan for a company without one invites the question of what else was copied without reading.

Drafting sequence that works in practice

1. Pull the evidence list. After fieldwork, list every workpaper that cites a management assertion the auditor relied on without independent corroboration: management's intent, plans, knowledge of claims, completeness of related party lists.
2. Draft from the firm template, then delete. Remove every paragraph with no support in the file.
3. Add client-specific paragraphs. Use the client's own names for the line items, accounts and agreements.
4. Attach the summary of uncorrected misstatements. AU-C 580 requires the summary to be attached to the letter, so the letter references it and the two travel together. See summary of uncorrected misstatements.
5. Send the draft to management well before the report date. The signing meeting is not the place for management to see the wording for the first time.
6. Date the letter as of the report date. Management reviews the final financial statements and notes before signing. The letter date moves if the report date moves.

Who signs

The auditor asks those with responsibility for the financial statements and knowledge of the matters concerned to sign, which normally means the chief executive and chief financial officer or their equivalents. Where an owner-manager runs a small client, the owner signs and the file records why a second signatory is not available. Where management changed during the periods covered, see representation letter problems.

Reviewer checks before release

A reviewer reading the letter applies these checks:

• Date equals the date of the auditor's report.
• Addressed to the auditor, on client letterhead, with signer titles.
• All periods in the financial statements are covered, including comparative periods.
• Each paragraph traces to a workpaper or a standard requirement.
• The summary of uncorrected misstatements is attached and ties to the audit file totals.
• No paragraph has been struck or reworded by management without the engagement partner seeing it. A struck required representation counts as not provided.

What the letter does not do

A representation is evidence, but it does not replace evidence the auditor expected to obtain. When management says a document does not exist and the auditor would normally expect it to, the representation does not close the gap. The GAO Financial Audit Manual makes the same point: representations supplement other procedures but do not substitute for them, and a refusal to furnish them limits the scope of the audit. If a representation conflicts with other evidence, the auditor investigates the conflict and reconsiders how far management's statements can be relied on.

CORAA prepares ready-to-review audit files for US CPA firms; the firm keeps the client, the review and the signature. See /us.

Sources

• AICPA, AU-C Section 580, Written Representations
• AICPA, AU-C Section 450, Evaluation of Misstatements Identified During the Audit, and AU-C Section 560, Subsequent Events and Subsequently Discovered Facts
• U.S. Government Accountability Office, Financial Audit Manual, Volume 1 (GAO-26-108577), June 2026, section 550 on management representations: gao.gov

AU-C references are to AICPA Professional Standards, paraphrased here; read the standard itself before relying on a requirement. This page is guidance, not professional advice. Report an error