Wiley Practitioner's Guide to GAAS 2018, 2nd Edition

AU-C 265 Communicating Internal Control Related Matters Identified in an Audit

AU-C Original Pronouncements

Sources

Statements on Auditing Standards (SASs) 122, 125, 128, and 130.

AU-C Definitions of Terms

Source: AU-C Section 265.07

1. Deficiency in internal control. A deficiency in internal control over financial reporting exists when the design or operation of a control does not allow management or employees, in the normal course of performing their assigned functions, to prevent, or detect and correct, misstatements on a timely basis. A deficiency in design exists when (1) a control necessary to meet the control objective is missing, or (2) an existing control is not properly designed so that, even if the control operates as designed, the control objective would not be met. A deficiency in operation exists when a properly designed control does not operate as designed or when the person performing the control does not possess the necessary authority or competence to perform the control effectively.
2. Material weakness. A deficiency or a combination of deficiencies in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of the entity's financial statements will not be prevented, or detected and corrected, on a timely basis. A reasonable possibility exists when the likelihood of an event occurring is either reasonably possible or probable as defined as follows:
   1. Reasonably possible. The chance of the future ...