Management Representation Letter in UAE Audits

Beyond the Signature: Understanding the True Role of the Management Representation Letter

In many audits, there is a common misconception that once management signs a Management Representation Letter (MRL), the auditor has obtained sufficient evidence for the matters covered within it. This belief is not only incorrect but also inconsistent with the requirements of the International Standards on Auditing (ISAs).

The Management Representation Letter is an important audit document — but it is not a substitute for sufficient appropriate audit evidence. Auditors who rely solely on management representations expose themselves to unnecessary audit risk and may fail to comply with professional standards.

This article explores the purpose of the MRL, the limitations of management representations, and why independent corroborative evidence remains fundamental to a high-quality audit.

What Is a Management Representation Letter?

A Management Representation Letter is a written confirmation from management acknowledging its responsibility for the preparation of the financial statements and confirming specific representations made to the auditor during the audit.

ISA 580 – Written Representations requires auditors to obtain written representations from management regarding the fulfilment of its responsibilities and other matters relevant to the audit.

Typically, the letter includes representations regarding:

Responsibility for the preparation and fair presentation of the financial statements
Completeness of accounting records and supporting documentation
Disclosure of related party relationships and transactions
Recognition of contingent liabilities and litigation
Assessment of going concern
Completeness of information provided to the auditor
Occurrence of subsequent events
Compliance with applicable laws and regulations

The letter is generally signed by senior management and, where appropriate, those charged with governance who have responsibility for the financial statements.

The Misconception: “The MRL Covers It”

A common issue encountered in practice is treating the Management Representation Letter as evidence for matters where independent verification is difficult or unavailable. Examples include:

Inventory quantities
Completeness of liabilities
Existence of related party transactions
Recoverability of receivables
Pending legal disputes
Compliance with contractual obligations
Going concern assumptions

When supporting documentation is unavailable, some assume the MRL can simply “cover” the issue. Professional auditing standards clearly state otherwise.

What Do the Auditing Standards Require?

The principles under the International Standards on Auditing are unequivocal.

ISA 500 – Audit Evidence

ISA 500 requires the auditor to design and perform audit procedures to obtain sufficient appropriate audit evidence to draw reasonable conclusions on which to base the auditor’s opinion.

Sufficiency relates to the quantity of audit evidence.
Appropriateness relates to the quality of audit evidence, including its relevance and reliability.

ISA 580 – Written Representations

ISA 580 explicitly states that written representations do not provide sufficient appropriate audit evidence on their own regarding any of the matters with which they deal. Instead, written representations complement other audit evidence obtained during the audit. This distinction is fundamental.

Why Representations Alone Are Not Enough

1. Management Is Not Independent

Management prepares the financial statements and therefore cannot provide independent evidence regarding its own assertions. While management is expected to act honestly, ISA 200 – Overall Objectives of the Independent Auditor requires auditors to exercise professional skepticism throughout the audit. Professional skepticism requires auditors to critically assess evidence rather than simply accepting management’s explanations.

2. Written Representations Have Limited Reliability

ISA 500 explains that the reliability of audit evidence depends significantly on its source. Generally:

External confirmations are more reliable than internally generated documents
Auditor-generated evidence is more persuasive than management representations
Original documentation is more reliable than photocopies
Corroborated evidence is more persuasive than unsupported assertions

Since an MRL originates from management, its evidential value is inherently limited compared with independent evidence.

3. Professional Skepticism Must Always Be Maintained

Professional skepticism requires auditors to critically evaluate all evidence obtained during the engagement. Simply obtaining a written representation without attempting to corroborate it would be inconsistent with the requirements of ISA 200. Auditors must remain alert to evidence that contradicts management’s representations.

4. Audit Risk Cannot Be Reduced by Signatures Alone

A signed Management Representation Letter does not reduce audit risk if significant assertions remain unsupported. Audit conclusions must always be based on sufficient appropriate audit evidence — not merely on management’s written confirmation.

Practical Examples

Example 1 — Bank Balances

Management states in the MRL that all bank balances are correctly recorded.

Can the auditor omit obtaining an independent bank confirmation? No.

Under ISA 505 – External Confirmations, external confirmations provide more reliable audit evidence than management representations. Where bank confirmations cannot be obtained, the auditor should perform appropriate alternative procedures, such as reviewing bank statements, online banking records, bank reconciliations, and subsequent transactions.

Example 2 — Pending Litigation

Management confirms there are no ongoing legal disputes.

Should the auditor stop there? Again, no.

The auditor should obtain corroborative evidence through procedures such as:

Reviewing legal expense accounts
Inspecting board minutes
Obtaining legal representation letters where appropriate
Reviewing correspondence with legal advisers

These procedures are consistent with ISA 501 – Audit Evidence – Specific Considerations for Selected Items, which addresses litigation and claims.

Example 3 — Related Party Transactions

Management confirms that all related parties have been disclosed. This representation should be corroborated through:

Corporate records
Shareholding registers
Board minutes
Regulatory filings
General ledger reviews
Searches for unusual transactions

ISA 550 – Related Parties requires auditors to perform procedures to identify, assess, and respond to risks arising from related party relationships and transactions. A written representation alone is insufficient.

Example 4 — Going Concern

Management represents that the entity will continue as a going concern. The auditor should independently evaluate:

Cash flow forecasts
Financing arrangements
Loan covenant compliance
Subsequent events
Budget assumptions

These procedures are required under ISA 570 (Revised) – Going Concern. The representation supports — but does not replace — the auditor’s assessment.

Example 5 — Subsequent Events

Management confirms that all subsequent events have been disclosed. The auditor should also perform procedures required by ISA 560 – Subsequent Events, including:

Reading minutes of meetings
Reviewing interim financial information
Making inquiries of management
Evaluating events occurring between the reporting date and the auditor’s report

Again, the MRL is supplementary evidence.

When Does the MRL Become Important?

Although it cannot replace audit evidence, the Management Representation Letter serves several important purposes. It:

Documents management’s responsibility for the financial statements
Confirms oral representations made during the audit
Reduces misunderstandings between management and the auditor
Provides evidence regarding management’s acknowledgement of its responsibilities
Supports audit documentation required under ISA 230 – Audit Documentation
Completes one of the mandatory requirements of ISA 580

It is therefore an essential component of the audit file — but not the primary evidence supporting audit conclusions.

What Happens if Management Refuses to Sign?

Under ISA 580, if management refuses to provide written representations requested by the auditor, the auditor must:

Discuss the matter with management
Reassess management’s integrity
Evaluate the implications for the reliability of other audit evidence
Determine the effect on the audit opinion

Fundamental Representations: If management refuses to sign representations regarding their responsibility for preparing the financial statements and providing complete information to the auditor, ISA 580.20 strictly requires the auditor to disclaim an opinion or withdraw from the engagement.

If management refuses to provide specific representations (e.g., regarding litigation or valuation assumptions), the auditor must evaluate the pervasiveness of the issue to determine whether to issue a qualified or disclaimed opinion, or withdraw from the engagement entirely. Crucially, alternative evidence matters 100%. If alternative procedures yield sufficient appropriate evidence, the matter is not considered pervasive—unless the refusal itself exposes a systemic fraud or a fundamental lack of management integrity that taints the validity of the entire audit file.

The Bigger Picture: Evidence Must Be Corroborated

High-quality audits are built on a combination of evidence obtained from multiple independent sources. For every significant assertion, auditors should seek evidence through procedures such as:

External confirmations (ISA 505)
Inspection of original documentation (ISA 500)
Observation
Recalculation
Reperformance
Analytical procedures (ISA 520)
Inquiry supported by corroborative evidence

Management representations should reinforce these procedures — not replace them.

Key Takeaways

The Management Representation Letter is often misunderstood. While it is mandatory under ISA 580 and plays an important role in documenting management’s responsibilities and representations, it cannot compensate for missing audit evidence.

As ISA 580 clearly states, written representations do not provide sufficient appropriate audit evidence on their own.

An auditor should never conclude:

“We have the MRL, so we don’t need additional evidence.”

Instead, the correct approach is:

“We have obtained sufficient appropriate audit evidence, and the MRL provides additional written confirmation of management’s representations.”

That distinction separates a standards-compliant audit from one that relies on unsupported assertions.

In today’s increasingly regulated environment, where audit quality is under greater scrutiny than ever, auditors must remember a simple principle:

Independent evidence builds confidence. Management representations merely support it.

Services

Abu Dhabi

Dubai

Sharjah