Formal Versus Informal Communication During Fieldwork (CIA Part 2: Engagement Supervision and Communication)
Introduction
During an internal audit engagement, communication with the client does not wait until the final report. It happens throughout fieldwork, from the opening conference to the exit meeting. The CIA Part 2 exam tests whether you understand when internal auditors should talk informally with engagement clients and when they must communicate formally. You also need to know why the two types work together. This guide explains what the concept is, why it matters, how it works in practice, and how to answer exam questions on it.
Why It Is Important
Effective communication during fieldwork matters for several reasons.
1. It prevents surprises. A guiding principle of internal audit is that the final report should contain no surprises. If management first learns of a significant finding in the final report, trust breaks down. Management may become defensive, and the report loses credibility.
2. It confirms accuracy. Discussing observations as they arise lets the client correct misunderstandings and supply more evidence. This supports the requirement that communications be accurate, objective, clear, concise, constructive, complete and timely.
3. It enables timely corrective action. Some issues, such as fraud indicators, serious control breakdowns or safety risks, cannot wait for the final report. Early communication lets management act quickly.
4. It builds the working relationship. Ongoing dialogue shows that internal audit is a partner focused on improvement, not a fault-finder. This helps clients accept recommendations.
5. It supports professional standards. The IIA Standards (including the Global Internal Audit Standards) expect communication with management throughout the engagement. They also expect findings to be discussed with appropriate parties before final communications are issued. Supervision and documentation requirements mean significant communications must be recorded.
What It Is
Informal communication is the ongoing, often verbal exchange of information between auditors and engagement clients during fieldwork. Examples include:
- Day-to-day conversations with process owners to understand procedures
- Quick discussions to validate an observation or exception
- Status updates over email, phone or brief meetings
- Clarifying questions about documents or transactions
- Early mention of potential issues so management can respond or explain
Informal communication is flexible, fast and relationship-building. However, it is not a substitute for formal documentation, and on its own it does not carry the weight of an official audit communication.
Formal communication is structured, documented and often written communication that follows established procedures. Examples include:
- The engagement notification or announcement letter
- The entrance (opening) conference, with agenda and minutes
- Interim or progress reports, written or oral, issued on a scheduled basis
- Written observation or finding sheets (sometimes called audit observation memos or discussion drafts) given to management for response
- The exit (closing) conference
- The draft and final engagement reports
Formal communications create a record. They establish accountability and are usually reviewed and approved by the engagement supervisor or chief audit executive (CAE).
Key distinction: Informal communication keeps the dialogue open and resolves minor matters. Formal communication documents significant matters, obtains official management responses, and creates evidence that communication took place.
How It Works
1. Planning stage. The communication approach is set during planning. It covers who receives updates, how often, and in what format. This is often agreed during the opening conference.
2. Opening (entrance) conference. This formal meeting covers objectives, scope, timing, the communication protocol and how findings will be handled. It is documented.
3. Ongoing fieldwork dialogue (informal).
- Auditors talk with staff to understand processes and test results.
- When exceptions arise, auditors discuss them informally with the responsible person to confirm the facts. The client may provide an explanation or extra evidence, and the issue may be resolved.
- Minor issues that are resolved or insignificant may be communicated only informally. They are documented in workpapers but may not appear in the formal report.
4. Escalation to formal communication. When an observation is confirmed and significant, the auditor documents it formally. This is usually done as a written finding covering condition, criteria, cause, effect and recommendation. It goes to the appropriate level of management for a written response and action plan.
5. Interim reports. These may be issued on long engagements, or when matters need immediate attention. Interim reports do not eliminate the need for a final report.
6. Urgent matters. If auditors discover suspected fraud or a significant risk exposure, they communicate promptly to the right level, possibly senior management or the board. They follow the internal audit charter and policies. They do not just mention it informally to a staff member, and they never alert a person who may be involved in the fraud.
7. Exit (closing) conference. This formal meeting reviews findings and recommendations before the report is finalized. It confirms the facts, discusses management responses and resolves disagreements. Disagreements that cannot be resolved are noted in the report along with both positions.
8. Documentation. Significant informal discussions should be summarized in the workpapers: who, when, what was discussed and the outcome. A conversation that is not documented is hard to prove and cannot support the engagement record.
Comparing Formal and Informal Communication
| Aspect | Informal Communication | Formal Communication |
|---|
| Purpose | Clarify facts, maintain rapport, give quick updates, resolve minor issues | Officially report findings, obtain responses, create accountability |
| Form | Verbal, email, ad hoc meetings | Written memos, interim reports, conferences with minutes, engagement reports |
| Timing | Continuous, as issues arise | Scheduled points (opening, interim, exit, report) or urgent escalations |
| Audience | Usually operational staff and process owners | Management responsible for action, senior management, the board as appropriate |
| Review and approval | Typically not formally reviewed | Reviewed or approved by the engagement supervisor or CAE |
| Documentation | Summarized in workpapers if significant | Retained as part of the engagement record |
| Weakness if used alone | No official record, risk of misunderstanding, no accountability | Can feel adversarial and slow, and may surprise the client if not preceded by dialogue |
Common Pitfalls- Relying only on verbal discussion for a significant finding, which leaves no evidence or management response
- Waiting until the final report to raise issues, which creates surprises
- Communicating findings informally to the wrong person, such as someone without authority to act or someone implicated in wrongdoing
- Treating informal agreement from staff as management's official response
- Not documenting key informal conversations in the workpapers
Exam Tips: Answering Questions on Formal Versus Informal Communication During Fieldwork1. Remember the no-surprises principle. When a question asks for the best practice, pick answers where findings are discussed with management before the final report. Answers in which management first learns of an issue in the final report are almost always wrong.
2. Significance drives formality. Minor, resolved issues can be handled informally and documented in the workpapers. Significant findings require formal written communication and a management response. If the question describes a material weakness, fraud indicator or major risk, choose the formal, documented and escalated option.
3. Informal communication complements formal communication. Be wary of options saying informal discussions
replace formal reporting, or that interim reports
eliminate the need for a final report. Interim communications supplement the final report.
4. Watch for the right audience. The correct answer usually sends findings to the level of management that can take corrective action. For suspected fraud, the answer involves escalating to appropriate senior management or the board per the charter. It never involves telling the suspected individual.
5. Timeliness is key. Questions about urgent issues, such as an ongoing loss or a safety hazard, point to immediate communication. This can be oral first and then followed up in writing. Look for answer choices that combine prompt notice with later documentation.
6. Documentation is always correct. If an option says to document significant oral discussions in the workpapers, it is likely right. Standards require sufficient documentation to support conclusions.
7. Know the purpose of each formal event.- The opening conference sets scope, objectives and the communication protocol.
- Interim reports give progress updates and flag urgent matters.
- The exit conference confirms facts and reviews findings before the report is final.
- The final report gives the official results, recommendations and action plans.
8. Handle disagreements correctly. If management disagrees with a finding, the auditor does not drop it just because of informal pushback. The best answer is to discuss it, consider new evidence and, if disagreement remains, report both positions in the final communication.
9. Spot extreme wording. Options with words like "only," "never discuss before the report," or "all findings must be in writing immediately" are often distractors. The best answers are balanced, combining informal dialogue with formal documentation.
10. Scenario approach. For scenario questions, ask yourself four things:
- How significant is the issue?
- Who needs to know?
- How urgent is it?
- What must be documented?
The answer that addresses all four is usually correct.
Sample QuestionDuring fieldwork, an auditor finds that purchase orders above approval limits were processed without authorization. The purchasing clerk verbally agrees it was an oversight. What should the auditor do next?
A. Consider the matter closed since the clerk agreed.
B. Include it in the final report without prior discussion with management.
C. Document the discussion, confirm the facts, and formally communicate the finding to the responsible manager for a response.
D. Report it directly to the board immediately.
Answer: C.- A wrongly treats informal agreement as resolution of a significant control issue.
- B violates the no-surprises principle.
- D skips the appropriate management level without evidence of fraud or extreme severity.
SummaryInformal communication keeps fieldwork collaborative, accurate and efficient. Formal communication ensures that significant findings are documented, reviewed, sent to the right people and acted upon. Successful engagements and correct exam answers combine both. Talk early and often, escalate based on significance and urgency, document what matters, and make sure the final report holds no surprises.
