Under the AICPA’s auditing standards, which of the following statements about an auditor’s communication of significant control deficiencies is true?
A.An auditor should perform tests of controls on significant control deficiencies before communicating them to the client.
B.A significant control deficiency previously communicated during the prior year’s audit that remains uncorrected causes a scope limitation.
C.An auditor should communicate significant control deficiencies after tests of controls, but before commencing substantive tests.
D.An auditor’s report on significant control deficiencies should include a restriction on the use of the report.
D.An auditor’s report on significant control deficiencies should include a restriction on the use of the report.
A communication of significant control deficiencies should (1) state that the purpose of the audit was to report on the financial statements, not to provide assurance on internal control; (2) give the definition of significant control deficiencies and material weaknesses; and (3) state that the report is intended solely for the information and use of those charged with governance, management, and others within the organization (or specified regulatory agency) and is not intended to be, and should not be, used by anyone other than the specified parties.