Journal · 8 January 2026
Reading a management letter without defensiveness
How finance teams can turn ranked audit findings into a board-ready remediation plan.
A management letter is not a scoreboard. It is a prioritized list of control and process gaps observed during fieldwork, written so the board can see residual risk.
Separate severity from embarrassment
A missing dual-approval on large payments is severe even if the team feels the process “usually works.” Severity follows potential misstatement and override risk, not how hard people worked.
Assign owners before the board pack
Each finding should leave your internal meeting with a name and a date. Letters that circulate without owners become folklore by the next audit.
Ask what would change the rating
If a finding feels overstated, ask which evidence would reduce its residual risk rating. That conversation is more useful than debating tone.
We write letters to be actionable. If a draft feels vague, say so before issuance — clarity is part of the engagement, not an extra courtesy.