Management letters

Separate from the opinion

The audit opinion is the formal, required part: it states whether your financial statements are fairly presented. A management letter is different. It is where the CPA writes down process concerns that do not belong in that formal opinion, things like weak assessment handling or thin accounting staffing, and sends them to the board instead.

"The auditor's report must state that the audit was conducted in accordance with GAAS."

Source: Clarified auditing standards, AU-C 700 to 706, AICPA

That requirement governs the opinion itself. A management letter sits outside it, so it can raise something the CPA noticed without turning it into a qualification of your statements.

What tends to show up in one

CPA-firm commentary on management letters commonly points to things like inadequate segregation of duties (one person both collects and deposits assessments, for example), undertrained accounting staff, or a prior period that had to be restated. There is no fixed, standard-required list, so treat any specific letter as describing what that CPA actually noticed at your association, not a universal checklist every association must clear.

A management letter is a byproduct of the engagement, not a guaranteed deliverable. Some years produce one, some do not, and an absent letter does not certify that controls were perfect.

What your board should do with it

Read it at the same meeting you review the audit or review report, not months later. Ask the manager or treasurer how each item will be addressed, and put a follow-up on next year's agenda so you can check whether it was fixed. Acting on a management letter is part of the board's fiduciary duty to oversee association funds, even though the letter itself carries no legal force.

Whether your bylaws or state statute require the board to formally respond to a management letter, or to share it with owners, varies. Check your governing documents and engagement letter with the CPA firm to see what is expected.