ISA 580 — Written Representations: Complete Guide

Key Takeaways

Written representations are necessary audit evidence that the auditor is required to obtain on every audit engagement — they are not optional or a formality.
ISA 580 requires two mandatory categories of representation: management's acknowledgment of its responsibility for the financial statements, and confirmation that it has provided the auditor with all relevant information.
Numerous other ISAs require specific written representations on matters such as fraud, laws and regulations, accounting estimates, related parties, subsequent events, and going concern.
Written representations are necessary but not sufficient audit evidence — they complement other procedures but cannot replace them.
If management refuses to provide one or both mandatory representations, the auditor must disclaim the audit opinion — there is no alternative.
If the auditor has doubts about management's integrity or the reliability of representations, the auditor must consider whether the audit can be completed and whether other audit evidence obtained throughout the engagement remains trustworthy.

What is ISA 580?

ISA 580, titled "Written Representations," deals with the auditor's responsibility to obtain written representations from management — and, where appropriate, from those charged with governance — as part of the audit evidence gathered during an audit of financial statements.

A written representation is a formal statement by management, provided to the auditor in the form of a representation letter. It serves as audit evidence for matters that only management can confirm. Some information simply cannot be independently verified by the auditor — for example, whether management has disclosed all known instances of non-compliance with laws and regulations, or whether all related party relationships have been identified. In these cases, the representation letter provides necessary (though not sufficient) evidence.

The representation letter also serves a second, equally important purpose: it reminds management of its responsibilities. By signing the letter, management formally acknowledges that the preparation of the financial statements is its responsibility, not the auditor's — and that it has fulfilled its obligation to provide the auditor with complete and unrestricted access to all information relevant to the audit.

Two Mandatory Categories of Representation

ISA 580 identifies two categories of written representation that the auditor must obtain on every audit engagement. These are non-negotiable — the auditor cannot complete the audit without them.

1. Responsibility for the financial statements

ISA 580.10 requires the auditor to request management to provide a written representation confirming that it has fulfilled its responsibility for the preparation of the financial statements in accordance with the applicable financial reporting framework, including, where relevant, their fair presentation. This representation must be consistent with the terms of the audit engagement agreed under ISA 210.

This representation matters because it establishes the fundamental premise of an audit: management is responsible for the financial statements, not the auditor. Without this acknowledgment, the auditor cannot issue an opinion — because the opinion is predicated on the assumption that someone with appropriate authority has taken responsibility for the statements being audited.

2. Completeness of information

ISA 580.11 requires the auditor to request management to provide a written representation confirming that:

It has provided the auditor with all relevant information and access as agreed in the terms of the audit engagement.
All transactions have been recorded and are reflected in the financial statements.
Management has disclosed to the auditor all known actual or possible non-compliance with laws and regulations whose effects should be considered when preparing the financial statements.

The completeness representation addresses what auditors call the "completeness assertion" — the risk that something exists but has not been recorded or disclosed. This is inherently difficult for the auditor to test independently, which is precisely why the representation is required.

Representations Required by Other ISAs

Beyond the two mandatory categories, numerous other ISAs require the auditor to obtain specific written representations. ISA 580.A8 acknowledges that these representations are integral to the overall body of audit evidence and should be included in the representation letter.

ISA	Subject Matter	Representation Required
ISA 240	Fraud	Management's acknowledgment of its responsibility for internal controls to prevent and detect fraud; disclosure of known or suspected fraud
ISA 250	Laws and regulations	Disclosure of all known instances of non-compliance or suspected non-compliance with laws and regulations
ISA 450	Evaluation of misstatements	Whether management believes the effects of uncorrected misstatements are immaterial, individually and in the aggregate
ISA 501	Specific audit evidence	Completeness of information provided regarding litigation and claims
ISA 540	Accounting estimates	Reasonableness of significant assumptions used in making accounting estimates
ISA 550	Related parties	Completeness of disclosure of related party relationships and transactions
ISA 560	Subsequent events	Whether any events occurring after the balance sheet date require adjustment or disclosure
ISA 570	Going concern	Management's plans for future actions, the feasibility of those plans, and disclosure of going concern uncertainties

In practice, all of these representations are consolidated into a single representation letter. The letter therefore becomes a comprehensive document that touches on virtually every significant area of the audit.

Additional Representations

ISA 580.13 allows the auditor to request additional written representations beyond those required by the standard and by other ISAs. The auditor may determine that additional representations are necessary to support other audit evidence relevant to the financial statements or to one or more specific assertions.

Common examples of additional representations include: confirmation that all minutes of board and shareholder meetings have been made available to the auditor; confirmation of the entity's intentions regarding the holding or disposal of specific assets; details about side agreements or informal arrangements that may not be captured in formal documentation; and confirmation that there are no undisclosed commitments, contingencies, or guarantees.

The key principle is that additional representations should address matters where the auditor has assessed a risk and where management is in a unique position to provide evidence. They should not be used as a substitute for performing audit procedures that the auditor could and should perform independently.

Practical Requirements

Who signs the representation letter?

ISA 580.12 requires the auditor to request written representations from management with appropriate responsibilities for the financial statements and with knowledge of the matters concerned. In most cases, this means the chief executive officer (CEO) and the chief financial officer (CFO) — or their equivalents. These are the individuals with both the authority and the knowledge to make the representations credibly.

In some jurisdictions or governance structures, the auditor may also request representations from those charged with governance — for example, where governance responsibilities include approving the financial statements or where the governance body has specific knowledge of matters included in the representations.

When should the letter be dated?

ISA 580.14 requires the representation letter to be dated as near as practicable to, but not after, the date of the auditor's report on the financial statements. This is because the representations cover the period up to and including the date of the auditor's report. In practice, auditors aim to have the representation letter signed on the same day the auditor's report is signed — ensuring that the representations are current as of the reporting date.

What form must it take?

ISA 580.15 requires that written representations take the form of a representation letter addressed to the auditor. The letter is typically prepared on the entity's letterhead, signed by the appropriate members of management, and addressed to the engagement partner or the audit firm. ISA 580.A22 provides an illustrative example of a representation letter that auditors commonly use as a starting template.

The representation letter is not a tick-box exercise

A common pitfall is treating the representation letter as a standard template that management signs without reading. The auditor has a responsibility to ensure that management understands the representations being made. If management signs the letter without understanding its contents — or without having the knowledge to make the representations — the evidential value of the letter is compromised. Best practice is to discuss the letter with management in advance, explain why each representation is being requested, and give management adequate time to review the document before signing.

When Things Go Wrong

Doubts about reliability

ISA 580.16–17 addresses the situation where the auditor has concerns about the reliability of written representations or doubts about management's integrity. If the auditor concludes that written representations are not reliable, the auditor must:

Determine the implications for the audit, including the impact on the reliability of other representations and other audit evidence obtained through management inquiry.
Take appropriate action, including considering the effect on the audit opinion. If written representations are inconsistent with other audit evidence, the auditor must investigate the discrepancy.
Consider whether to continue the engagement. If the auditor has serious doubts about management's integrity, it may be impossible to obtain sufficient appropriate audit evidence to form an opinion. In such cases, the auditor should consider withdrawing from the engagement where withdrawal is possible under applicable law or regulation (ISA 580.A24).

Management refuses to provide representations

ISA 580.19–20 addresses management's refusal to provide requested representations. The consequences depend on which representations are refused:

For the two mandatory representations (responsibility for the financial statements and completeness of information): if management refuses to provide either or both, the auditor must disclaim the audit opinion. There is no alternative. ISA 580.20 further requires the auditor to consider whether such a refusal casts doubt on other representations and on the reliability of management's responses to audit inquiries generally.

For other (non-mandatory) representations: the auditor must consider the effect of the refusal on the audit opinion, including whether other sufficient appropriate audit evidence can be obtained. If the auditor cannot obtain sufficient alternative evidence, the refusal constitutes a scope limitation — which may result in a qualified opinion or a disclaimer, depending on the pervasiveness of the matter.

ISA 580 in Your Jurisdiction

Netherlands. COS 580 follows ISA 580 closely. The representation letter is known as the bevestigingsbrief in Dutch practice. Dutch auditors typically prepare the letter and present it to management for review and signature. The AFM has emphasised that auditors should ensure management genuinely understands and engages with the representations rather than treating the letter as an administrative formality.

Germany. ISA 580 is implemented within the German auditing framework. The representation letter is known as the Vollständigkeitserklärung (completeness declaration). German practice has historically placed strong emphasis on this letter, and the WPK's guidance reinforces the importance of obtaining comprehensive representations, particularly regarding completeness and related party disclosures.

United Kingdom. ISA (UK) 580 is substantively aligned with the international standard. The FRC's inspection findings have noted instances where auditors obtained representation letters that were generic rather than tailored to the specific circumstances of the engagement. The FRC expects auditors to customise the representation letter to address the significant risks identified during the audit.

France. ISA 580 is adopted through NEP standards under H3C supervision. The representation letter is known as the lettre d'affirmation. In the French joint audit system, representation letters are typically addressed to both joint auditors. The H3C has reinforced the expectation that management representations should be specific and substantive, not generic.

Frequently Asked Questions

Can written representations replace other audit procedures?

No. ISA 580.4 is clear that written representations are necessary audit evidence, but they are not sufficient on their own. The auditor must still obtain other audit evidence through inspection, observation, inquiry, confirmation, recalculation, reperformance, and analytical procedures. Representations complement other evidence — they do not replace it. If written representations are the only evidence available for a matter, the auditor must consider whether sufficient appropriate audit evidence has been obtained.

What if management adds qualifications or limitations to the representation letter?

If management qualifies a requested representation — for example, stating that information is complete "to the best of their knowledge" when the auditor requested an unqualified statement — the auditor must consider whether the qualification is reasonable. If the qualification undermines the purpose of the representation, the auditor should discuss the matter with management. If the issue cannot be resolved, the auditor must consider the implications for the audit opinion, including whether a scope limitation exists.

Does the representation letter need to be updated if events occur between the letter date and the auditor's report date?

ISA 580.14 requires that the representation letter be dated as near as practicable to, but not after, the date of the auditor's report. If a significant event occurs between the date of the representation letter and the date of the auditor's report, the auditor may need to obtain an updated representation letter or an additional representation addressing the new matter. In practice, auditors typically aim to have the representation letter dated on the same day as the auditor's report.

Is an email from management sufficient as a written representation?

ISA 580.15 requires that written representations take the form of a representation letter addressed to the auditor. While the standard does not explicitly prohibit electronic formats, a formal letter on company letterhead signed by the appropriate members of management is considered best practice. Most firms require a wet-ink or qualified electronic signature on formal letterhead to ensure the representations carry appropriate weight and can be clearly attributed to the signatories.