Definition
Tone at the top is the attitude and behavior of senior management and those charged with governance toward ethics, integrity and financial reporting. It is the main input to the control environment in the COSO framework and in AU-C 315, where the auditor evaluates whether management, with the oversight of those charged with governance, has created and maintained a culture of honesty and ethical behavior.
Why it matters in an audit or review
If the tone is weak, controls designed well on paper are likely to be overridden or ignored, which affects the whole audit and not only one account. A weak tone is also a fraud risk factor. The auditor learns it through inquiry, observation, how management reacts to prior-year findings, and whether the board challenges management.
Example
A prior-year management letter pointed out that the controller could post and approve her own journal entries. A year later nothing changed, and the CEO called the point a nuisance. The auditor concludes the control environment is weak, assesses control risk at the maximum across most assertions, and widens substantive work and journal entry testing.
Common mistakes
Judging tone from the code of conduct alone. Written policies show intent; action shows tone.
Sources
- AICPA, AU-C Section 315 (control environment; as amended by SAS No. 145)
- COSO, Internal Control - Integrated Framework (2013), Principle 1
- AICPA, AU-C Section 240, Consideration of Fraud in a Financial Statement Audit
Definitions paraphrase AICPA and FASB guidance; read the standard itself before relying on a requirement. Example figures are illustrative. This page is guidance, not professional advice. Report an error