ISA 580: Written Representations: Complete Guide

What is ISA 580?

ISA 580, titled “Written Representations,” governs one of the final but essential steps in every audit: obtaining a formal letter from management confirming key matters. The representation letter is not a substitute for audit work, and it is not a formality. It serves a specific purpose that cannot be achieved through other procedures.

The reason is straightforward: certain matters can only be confirmed by management. The auditor cannot independently verify that management has provided all information and that all transactions are recorded. Similarly, the auditor cannot verify management’s intentions (e.g., whether they intend to hold an investment to maturity). Written representations fill these gaps.

Two mandatory categories

1. Responsibility for the financial statements

ISA 580.10 requires the auditor to request written representations confirming that management has fulfilled its responsibility for preparing the financial statements in accordance with the applicable financial reporting framework, including (where relevant) their fair presentation.

This representation must describe those responsibilities in the same terms as the engagement letter (ISA 210). It is not made subject to management’s “best knowledge and belief.” It is a confirmation of responsibility, not a statement of knowledge.

2. Completeness of information

ISA 580.11 requires representations that management has provided the auditor with:

• All relevant information and access as agreed in the engagement terms.
• All transactions have been recorded and are reflected in the financial statements.

This is the completeness representation, arguably the most important single representation, because the auditor cannot otherwise confirm that nothing has been withheld.

Representations required by other ISAs

The representation letter collects confirmations required across the full suite of ISAs. The most significant include:

Additional representations

ISA 580.13 allows the auditor to request additional representations beyond those required by other ISAs, when the auditor determines they are necessary to support other audit evidence. Common examples include representations about management’s intentions (e.g., intention to hold financial instruments to maturity), about the basis for specific accounting treatments, or about specific matters unique to the entity.

Practical requirements

Who signs?

The representation letter is signed by management, typically the CEO and CFO (or equivalent). Where those charged with governance have responsibilities separate from management (e.g., directors’ responsibilities for fair presentation), representations may also be required from them.

When?

The representation letter must be dated as near as practicable to, but not after, the date of the auditor’s report. It covers all financial statements and periods referred to in the auditor’s report.

What form?

The representations must be in the form of a written letter addressed to the auditor. An email from the CFO is not sufficient. The letter must be signed by the appropriate individuals.

When things go wrong

Doubts about reliability of representations

ISA 580.16–17 addresses the situation where the auditor has concerns about the competence, integrity, ethical values, or diligence of management, or where representations are inconsistent with other audit evidence:

• The auditor must determine the effect on the reliability of representations (oral and written) and audit evidence in general.
• If the representations are inconsistent with other evidence, the auditor must perform additional procedures to resolve the matter.
• If representations are considered unreliable, the auditor must consider the implications for the audit opinion.
• Where doubts about integrity exist, the auditor must assess whether continuing the engagement is appropriate.

Management refuses to provide representations needed

ISA 580.19–20 addresses refusal:

• The auditor must discuss the refusal with management and re-evaluate management’s integrity.
• Consider the effect on the reliability of all representations and audit evidence, and take appropriate action regarding the audit opinion.

If management refuses to provide the mandatory representations about responsibility for the financial statements and completeness of information (ISA 580.10–11), the auditor must express a disclaimer of opinion. The auditor cannot complete the audit without these fundamental confirmations.

If management refuses to provide other requested representations, the auditor must consider the reasons for the refusal and its implications, which may lead to a qualified opinion or disclaimer depending on the pervasiveness of the matter.

Worked example: De Groot Techniek B.V.

De Groot Techniek B.V. is a Dutch technical services company with €25M revenue, 140 employees, and a 31 December year-end. The audit team has completed fieldwork and is preparing the management representation letter. During the review of draft representations, the CFO pushes back on one item.

1. The engagement team prepares a tailored representation letter based on the ISA 580 template, incorporating standard representations under ISA 580.10 (responsibility for the financial statements under Dutch GAAP) and ISA 580.11 (completeness of information provided). The letter also includes specific representations required by ISA 240 (fraud), ISA 550 (related parties), and ISA 570 (going concern).

Documentation note: file the draft representation letter in the completion section with a cross-reference to the engagement letter for consistency of management’s responsibilities description.

1. The team adds a specific representation about a €1.2M contract dispute with a former subcontractor, identified during substantive testing of provisions. The representation asks management to confirm that the provision of €400K reflects its best estimate of the obligation under IAS 37.

Documentation note: cross-reference to the ISA 501 litigation and claims working paper. Record the basis for the specific representation and the corresponding audit evidence obtained.

1. The CFO reviews the letter and objects to the representation about related party completeness. He states that the company’s transactions with a sister entity (owned by the same shareholder) are “clearly at arm’s length” and that a blanket representation about related party completeness is unnecessary.

Documentation note: record the CFO’s objection verbatim in the engagement completion memorandum. Document the discussion with the engagement partner about the implications under ISA 580.19.

1. The engagement partner meets with the CFO and the managing director to explain that the related party representation is required by ISA 550 and cannot be omitted. After discussion, management agrees to sign the letter including the related party representation but requests minor wording changes to clarify the scope. The team evaluates the revised wording and confirms it does not dilute the representation.

Documentation note: retain both the original and revised versions of the letter. Document the partner’s assessment that the revised wording still satisfies ISA 550.26 and ISA 580.13 requirements.

1. The signed letter is dated 15 March 2026, the same date as the auditor’s report. The team confirms the letter covers all financial statements and periods referred to in the report.

Documentation note: verify the letter date against the auditor’s report date per ISA 580.14. File the signed original in the permanent completion section.

The file now contains a tailored representation letter addressing entity-specific risks, a documented resolution of management’s pushback, the engagement partner’s assessment of integrity implications, and the rationale for accepting the revised wording. A reviewer would see that ISA 580 was applied as a substantive procedure, not treated as an administrative formality.

Practical checklist

1. Tailor the representation letter to the specific engagement. Remove boilerplate items that do not apply, and add representations for entity-specific risks identified during fieldwork (ISA 580.13).
2. Cross-check every specific ISA representation requirement against the letter before sending it to management. Confirm that representations required by ISA 240.39, ISA 250.16, ISA 450.14, ISA 550.26, and ISA 570.16(e) are all present.
3. Review the representation letter with management rather than sending it for blind signature. Use the discussion to probe for information not yet disclosed (ISA 580.A2).
4. If management qualifies, limits, or refuses any representation, document the discussion, reassess management’s integrity under ISA 580.20, and determine the opinion impact before proceeding.
5. Verify the letter date matches (or is as near as practicable to) the auditor’s report date (ISA 580.14). A letter dated weeks before the report date creates a gap the file cannot defend.
6. Confirm that the signatories are the individuals with appropriate responsibility and knowledge. If the engagement letter names specific individuals, the representation letter signatories should align.

Common mistakes

• Sending a generic template letter without tailoring it to the engagement. The AFM has flagged instances where representation letters were overly generic and not adapted to entity-specific risks identified during the audit (AFM, Sector in Beeld 2025, Chapter 2/4). A letter that does not reflect the actual audit findings provides weak evidence.
• Filing the signed letter without documenting management’s review or any discussion. The FRC’s 2025 inspection cycle identified lack of professional scepticism as a recurring enforcement theme, including auditors who failed to challenge management’s representations on complex or subjective areas (FRC Annual Enforcement Review 2024/2025). The representation letter conversation is part of that challenge.
• Dating the letter significantly before the auditor’s report date. This creates an uncovered period where events could occur that invalidate the representations, and reviewers will question whether subsequent events procedures covered the gap.

Related content

• Written representations — Glossary entry explaining what written representations are under ISA 580, the distinction between management’s responsibility acknowledgment and completeness representations.
• ISA 570 going concern checklist — Going concern is one of the areas requiring a specific representation in the letter. This checklist helps verify the going concern assessment that underpins the ISA 570.16(e) representation.
• ISA 500: Audit evidence guide — Written representations are audit evidence under ISA 500, but they sit at the lower end of the reliability spectrum. This guide covers how to evaluate the sufficiency and appropriateness of different evidence types.

ISA 580 in your jurisdiction

Netherlands. COS 580 follows ISA 580 closely. Dutch practice requires the representation letter (bevestigingsbrief) to be signed by the management board (directie/bestuur). The AFM has highlighted instances where representation letters were overly generic, not tailored to the specific engagement, or signed after the auditor’s report date.

Germany. IDW PS 580 adapts ISA 580. The Vollständigkeitserklärung (completeness declaration) is a well-established feature of German audit practice. German law requires specific representations in certain contexts, and the representation letter is typically signed by the Geschäftsführung. The WPK’s inspections examine whether representations are consistent with the audit findings.

United Kingdom. ISA (UK) 580 is substantively aligned with ISA 580. UK practice typically requires the representation letter to be signed by the board of directors or by specific directors authorised by the board. For PIE audits, ISA (UK) 580 includes additional requirements related to the confirmation that the directors have disclosed all relevant information for the audit.

France. NEP 580 implements ISA 580. The lettre d’affirmation (representation letter) is addressed to the commissaire aux comptes and signed by the dirigeants. French practice places particular importance on the letter covering conventions réglementées (regulated agreements) and the specific disclosure obligations under the Code de Commerce.

Frequently asked questions

Can written representations replace other audit procedures?

No. ISA 580.4 is explicit: written representations provide necessary audit evidence, but they do not provide sufficient appropriate audit evidence on their own about any of the matters with which they deal. If the auditor could reasonably perform other procedures to obtain evidence, those procedures must be performed. The representation cannot substitute for them.

What if management adds qualifications to the representation letter?

If management qualifies or limits a representation (e.g., “to the best of our knowledge, subject to...”), the auditor must evaluate whether the qualification is appropriate. If the qualification means the auditor cannot obtain the necessary assurance, it may constitute a refusal to provide the representation, with the corresponding opinion implications.

Does the representation letter need to be updated if facts change between signing and the auditor’s report date?

The representation letter should be dated as near as practicable to the auditor’s report date to minimise this gap. If significant events occur between the letter date and the report date, the auditor should consider whether an updated letter is needed.

Is an email sufficient?

No. ISA 580.15 requires a written letter addressed to the auditor. While the form may vary by jurisdiction, a formal signed letter on entity letterhead is the standard practice.

Further reading and source references

• IAASB Handbook 2024: ISA 580 full text — The authoritative source including appendices with illustrative representation letters and cross-references to other ISAs requiring representations.
• ISA 210: Agreeing the Terms of Audit Engagements — establishes the responsibilities that management acknowledges in the representation letter.
• ISA 705 (Revised): Modifications to the Opinion — applicable when representations are not provided or are unreliable.

This guide reflects the ISA 580 text as published in the IAASB 2024 Handbook. National implementations may include additional requirements — always consult the applicable national standard alongside the international text. This content is for educational purposes and does not constitute legal or professional advice.

Related ciferi content

Related guides:

Put audit concepts into practice with these free tools: