Discovery of Insufficient Evidence after Report Release

Requirement: Discovery of Insufficient Evidence after Report Release

9.68

If, after the report is issued, the auditors discover that they did not have sufficient, appropriate evidence to support the reported findings or conclusions, they should communicate in the same manner as that used to originally distribute the report to those charged with governance, the appropriate officials of the audited entity, the appropriate officials of the entities requiring or arranging for the audits, and other known users, so that they do not continue to rely on the findings or conclusions that were not supported. If the report was previously posted to the auditors’ publicly accessible website, the auditors should remove the report and post a public notification that the report was removed. The auditors should then determine whether to perform the additional audit work necessary to either reissue the report, including any revised findings or conclusions, or repost the original report if the additional audit work does not result in a change in findings or conclusions.