## SA 505: When Management Refuses External Confirmation
### What is External Confirmation?
External confirmation is direct written response to the auditor from a third party (confirming party) in paper or electronic form. It is one of the most reliable forms of audit evidence because it comes from an independent source.
### The Problem: Management Refuses to Allow Confirmation
Occasionally, management refuses to permit the auditor to send confirmation requests. This creates a significant audit challenge because the auditor cannot directly contact third parties.
### Required Steps When Refusal Occurs
Step 1 – Inquire and Evaluate Reasons
The auditor must ask management why they are refusing and then assess whether those reasons are valid and reasonable. A legitimate reason might be ongoing litigation with a party; an illegitimate reason (e.g., hiding fraud) raises serious red flags.
Step 2 – Evaluate Impact on Risk Assessment
The refusal itself is a piece of audit evidence. The auditor must re-evaluate:
- The risk of material misstatement (especially fraud risk)
- Whether the assessed risk changes
- What additional procedures are now required
Step 3 – Perform Alternative Audit Procedures
The auditor must design alternative procedures to gather equivalent, relevant, and reliable evidence. Examples: subsequent receipts testing, examination of contracts, third-party invoices.
### If Refusal is Unreasonable or Alternatives Fail
When the auditor concludes the refusal is unreasonable, or cannot obtain sufficient evidence through alternatives, two escalation actions are mandatory:
1. Communicate with Those Charged with Governance (TCWG) – as per SA 260
2. Determine implications for the audit opinion – as per SA 705 (possible modification of opinion)
### Key Principle
Management's refusal does not eliminate the auditor's obligation to obtain sufficient appropriate evidence. It merely changes the pathway.