The #1 reason candidates struggle with "Required Communications" on the CPA Auditing & Attestation (AUD) exam isn't a lack of memorization. It’s a fundamental misunderstanding of why these communications exist, who specifically needs to receive them, and the critical timing involved. Many get dazzled by the sheer volume of auditing standards and fall into the trap of rote learning, only to be stumped by scenario-based questions that demand judgment.
Required communications are mandatory interactions auditors must have with management and those charged with governance (e.g., the audit committee). They cover audit planning, significant findings, internal control deficiencies, and independence. These communications, governed by GAAS and PCAOB standards, ensure transparency and are heavily tested for their specific recipient and timing nuances.
Key facts
- Governing Standards: GAAS (AU-C 260) for nonissuers and PCAOB AS 1301 for issuers mandate these communications.
- Primary Recipients: Communications are primarily directed to management and those charged with governance (e.g., audit committee).
- Core Topics: Key areas include audit planning, significant findings, internal control deficiencies, and auditor independence.
- Exam Focus: Heavily tested for specific recipients, timing, and the underlying purpose of each communication.
- Purpose: Ensures transparency, enhances financial reporting quality, and supports oversight responsibilities.
What Are Required Communications and Why Do They Matter on the Exam?
Auditing isn't just about crunching numbers; it's fundamentally about communication. As a CPA, you're a critical conduit of information to those who oversee the entity. "Required Communications" refers to the specific, non-negotiable conversations and written reports auditors must have with specific parties during an audit. These aren't optional courtesies; they are mandated by standards like AU-C Section 260 for nonissuers and PCAOB AS 1301 for issuers.
The goal is to foster transparency, enhance financial reporting quality, and support the oversight responsibilities of those charged with governance (TCWG). The exam tests your ability to apply these rules in messy, real-world scenarios, making it a test of judgment, not just memory.
Studying for CPA AUD? Benchmark your score in 5 minutes.
Get an instant weak-spot assessment and a custom 12-week study plan PDF generated for your exam window.
How will this topic appear on the CPA exam?
On the AUD section, Required Communications is woven throughout various topics. You'll see it in:
- Multiple-Choice Questions (MCQs): These will present a scenario and ask you to identify the most appropriate communication, who should receive it, or when it must occur. Expect traps that differentiate between issuer and nonissuer requirements.
- Task-Based Simulations (TBSs): Elements of required communications often appear in research tasks or in scenarios where you must categorize findings (like internal control deficiencies) and then determine the appropriate recipients and timing for each.
The AICPA wants you to think like an auditor, understanding the implications of a finding. Try VoraPrep's free CPA practice questions to see how these judgment-based questions are structured.
What are the most common traps candidates fall into?
The nuances are where candidates lose points. Here are the most frequent pitfalls:
- Confusing "Who": Not distinguishing between communications to management versus those charged with governance (TCWG). Some items go to both, some to only one.
- Mistaking "When": Incorrectly recalling the timing. Is it "by the report release date"? "Within 60 days of the report release date"? "Timely"? These differences are critical.
- Misjudging Severity: Blurring the lines between "other deficiencies," "significant deficiencies," and "material weaknesses" in internal control, and thus misapplying the communication rules.
- Issuer vs. Nonissuer: Forgetting that PCAOB standards (for public companies) often have more stringent requirements than GAAS (for private companies).
- Focusing on Memorization: Trying to recall a list of rules without understanding the reason for the communication. This fails when the exam presents a novel scenario.
Key Rules You Must Know for the 2026 AUD Exam
To master this, you need to internalize the core principles and then apply the specific rules. Here’s a breakdown of what you must know.
Two-Way Communication with TCWG
The auditor must establish a clear understanding with TCWG regarding the terms of the engagement, the planned scope and timing of the audit, and the auditor’s responsibilities. It’s a dialogue, not a monologue. TCWG also communicates their expectations and relevant information to the auditor, which helps in risk assessment.
Auditor Independence Communications
Maintaining independence is non-negotiable. The auditor must communicate to TCWG any relationships or services that may reasonably bear on independence. This is a critical and often misunderstood area.
- What's communicated: A statement that the audit firm is independent, along with a description of any relationships or non-attest services provided to the audit client (if allowed) that could impact independence.
- Timing is key:
- For nonissuers (GAAS), this communication is required at least annually or whenever new relationships or services are provided.
- For issuers (PCAOB), it's required annually and prior to accepting the engagement.
Communicating Internal Control Deficiencies
This is one of the most heavily tested areas. You must differentiate the severity of any internal control deficiencies you find.
- Other Deficiencies: Less severe issues. Communicated in writing to management by the report release date. Communication to TCWG is optional.
- Significant Deficiencies: A deficiency important enough to merit attention by TCWG, but less severe than a material weakness. Must be communicated in writing to both management and TCWG by the report release date.
- Material Weaknesses: A deficiency where there's a reasonable possibility a material misstatement of the financial statements won't be prevented or detected on a timely basis. Must be communicated in writing to both management and TCWG by the report release date. For issuers, a material weakness existing as of year-end requires an adverse opinion on the effectiveness of ICFR.
Broader Communications with Those Charged with Governance (TCWG)
This is a broad category of significant findings from the audit. For nonissuers (GAAS - AU-C 260), these include:
- Auditor's responsibilities and the planned scope and timing of the audit.
- Significant findings, such as:
- Qualitative aspects of accounting practices (policies, estimates, disclosures).
- Difficulties encountered, like management-imposed scope limitations or significant delays in providing information.
- Uncorrected misstatements, unless clearly trivial. The emphasis is on these, as TCWG needs to evaluate their effect.
- Material corrected misstatements are also communicated, as they speak to the quality of the entity's accounting processes.
- Disagreements with management over accounting principles or audit procedures, which could impact the audit opinion if unresolved.
- Fraud: Any fraud involving senior management or employees with a significant role in internal control must be communicated directly to TCWG. This is a critical point that bypasses lower-level management.
For issuers (PCAOB - AS 1301), the requirements are more prescriptive and include discussions about critical audit matters (CAMs).
A Practical Example: Thinking Through a Scenario
Let’s walk through a realistic exam-style scenario to show you how to apply these rules under pressure.
---
Scenario:You are the audit senior for the 2026 audit of Evergreen Growers, Inc., a nonissuer. During your fieldwork, you uncover several issues:
- Inventory Valuation Error: Management recorded inventory at cost ($1,200,000) instead of the lower of cost or NRV ($1,150,000). This $50,000 misstatement is below overall materiality ($100,000) but exceeds the "clearly trivial" threshold ($5,000). Management has agreed to correct this misstatement.
- Weakness in Cash Disbursement Process: The controller reviews and approves all vendor invoices, but there is no independent second review before the CEO signs checks. This creates a risk that a material misstatement could occur and not be detected. The potential misstatement could be substantial.
- Minor Data Entry Error: A new accounts payable clerk occasionally inputs incorrect vendor codes, leading to minor payment delays. The aggregate impact of these errors is negligible, well below the "clearly trivial" threshold.
---
Step-by-Step Reasoning:Here's how an experienced CPA breaks this down:
Check Your State’s Exact CPA Exam Requirements
Every state has different credit hour, ethics, and residency rules. Use our 55-jurisdiction checker to verify your eligibility before applying.
- What is it? A $50,000 misstatement. It's below overall materiality but above the "clearly trivial" threshold. Crucially, management corrected it.
- Rule Application: Auditors must communicate significant findings to TCWG. A corrected misstatement that is not clearly trivial is considered a significant finding because it provides insight into the company's accounting processes.
- Who? This should be communicated to Those Charged with Governance (TCWG). Management is already aware since they made the correction.
- When? This communication should be timely, typically in writing by the report release date.
- What is it? A lack of segregation of duties creating a reasonable possibility of a material misstatement.
- Rule Application: The definition of a material weakness is a deficiency where there is a "reasonable possibility" that a "material misstatement" will not be prevented or detected. The scenario's language ("risk that a material misstatement could occur" and "potential misstatement... could be substantial") points directly to this classification.
- Who? Material weaknesses must be communicated to both management and TCWG.
- When? In writing, by the report release date.
- What is it? A minor control issue with a negligible impact, well below the "clearly trivial" threshold.
- Rule Application: This is an "other deficiency"—less severe than a significant deficiency or material weakness.
- Who? Other deficiencies are communicated to management. Communication to TCWG is optional.
- When? In writing, by the report release date.
---
Summary of Required Communications for Evergreen Growers, Inc.:| Finding | Classification | Communicated To | Timing |
|---|---|---|---|
| Inventory Valuation Error | Corrected Misstatement (Not trivial) | Those Charged with Governance (TCWG) | By the report release date |
| Weakness in Cash Disbursements | Material Weakness | Management and TCWG | By the report release date |
| Minor Data Entry Error | Other Deficiency | Management (TCWG optional) | By the report release date |
---
The Tempting Wrong Answer and Why It's Wrong:A common trap for the Inventory Valuation Error is to think it doesn't need to be communicated to TCWG because it was corrected and below materiality. Wrong. GAAS requires communicating significant audit findings. A misstatement that required correction—and was more than clearly trivial—is a significant finding that TCWG needs to know about for their oversight role.
For the Cash Disbursement Weakness, the trap is to classify it as a "significant deficiency" because no misstatement has actually occurred. This misses the point. The classification is based on the potential for a material misstatement. The phrase "reasonable possibility" is the key, and the scenario gives you that language. You must apply the definitions precisely.
Your 7-Day Sprint to Mastering Required Communications
Use this intensive one-week plan to turn this tricky topic into a source of confidence.
Day 1: Build the "Who" and "Why" Foundation- Action: In your own words, define "management" vs. "TCWG." For each, write one sentence on why they receive communications (e.g., Management needs to fix operational issues; TCWG needs to perform oversight).
- Checkpoint: Can you explain to a colleague why communicating a material weakness to the audit committee is different from telling the controller?
- Action: Create a three-column table: Finding | Communicated To | Timing. Populate it with the key items: SDs, MWs, other deficiencies, uncorrected misstatements, fraud involving management, independence, etc.
- Checkpoint: Without looking, can you state the recipient and timing for a significant deficiency? For an uncorrected misstatement?
- Action: Add a fourth column to your chart for "Issuer Nuances (PCAOB)." Note the key differences, especially for independence communication timing and the requirement for an adverse opinion on ICFR.
- Checkpoint: A question mentions a "publicly-traded company." What specific rules immediately come to mind?
- Action: Spend 90 minutes on MCQs. For every question, force yourself to identify the entity type (issuer/nonissuer), the finding, and the severity before looking at the answers. Read the explanations for both right and wrong answers.
- Checkpoint: Is your score improving? More importantly, are you getting faster at spotting the core issue in the question stem? VoraPrep's adaptive learning engine is perfect for this, as it will automatically serve you more questions on the nuances you're missing.
- Action: Work through 2-3 Task-Based Simulations related to internal controls or audit findings. Practice categorizing deficiencies and drafting mock communications.
- Checkpoint: Can you confidently classify a finding as a significant deficiency versus a material weakness based on a narrative description?
- Action: Review how required communications impact the final audit report. Specifically, how does an uncorrected material weakness for an issuer change the opinion on ICFR? How might a disagreement with management lead to a qualified or adverse opinion on the financial statements?
- Checkpoint: Can you trace a finding from discovery all the way to its impact on the audit report and required communications?
- Action: Review your master chart from Day 2. Then, quiz yourself with "what if" scenarios. What if management refuses to correct a material misstatement? What if you discover fraud by the CEO after the audit report has been issued?
- Checkpoint: Do you feel ready to apply the rules, not just recite them?
This structured approach builds the mental framework you need for exam day. For a quick reference on these and other key rules, our CPA Auditing and Attestation Cheat Sheet is a great resource.
Frequently asked questions
How many questions on Required Communications are on the AUD exam?
There isn't a fixed number, as it's an integrated topic. Expect to see its principles tested in approximately 3-5 multiple-choice questions and potentially as a key component of a Task-Based Simulation (TBS), especially one focused on internal controls or evaluating misstatements.
What's the single best way to study for this topic?
Focus on scenario-based application, not rote memorization. Create a simple "What, Who, When" chart and use practice questions to drill the application. For every practice question, ask yourself why a communication is required. Understanding the purpose (e.g., TCWG oversight) makes the rules intuitive.
Is Required Communications tested in simulations (TBSs)?
Yes, absolutely. A common TBS will provide a list of audit findings and require you to classify them (e.g., as a material weakness) and then identify the appropriate communication, recipient, and timing from a series of drop-down menus.
How does the communication for fraud differ from other deficiencies?
The key difference is the recipient. While most deficiencies are reported up the normal chain of command, any evidence of fraud involving senior management or employees with significant roles in internal control must be communicated directly to those charged with governance, regardless of materiality.
--- Ready to Pass Your CPA Exam? VoraPrep offers 9,500+ practice questions with detailed explanations, an adaptive learning engine that targets your weak areas, and an AI tutor (Vory) available 24/7. Our unique approach teaches you to think like the examiner, not just memorize.
Visit voraprep.com to get started and experience the VoraPrep difference. Start Your Free 14-day trial at voraprep.com →