What is a management representation letter and do I have to sign it?
It is a letter signed by the directors at the end of the audit confirming that they provided all records, disclosed all known matters and believe the accounts are fairly stated. Auditors normally require it before issuing their report, and refusal can lead to a modified opinion or no opinion.
Purpose. Auditors ask for written confirmation of what management has told them. The letter does not replace audit evidence; it records management's responsibility and supports statements made during the audit.
What it usually covers
- directors acknowledge their responsibility for the financial statements and internal control;
- all accounting records and information were made available;
- all transactions are recorded, including related-party dealings;
- known or suspected fraud, non-compliance with laws, and legal claims have been disclosed;
- subsequent events and going concern assumptions have been considered;
- unadjusted differences are immaterial.
Link to the Act. Section 245 puts the duty to keep records on the company and directors, and section 248 puts the duty to prepare financial statements on the directors. Section 266(4) lets the auditor require information and explanations from officers.
Do you have to sign? The Companies Act does not compel a signature, but under the auditing standard on written representations (ISA 580) an auditor who cannot obtain the representations required must discuss it with management and consider the effect on the opinion, which can mean a modified opinion or a disclaimer.
Signing carefully
- Read it line by line and check each statement is true.
- Ask for time and explanations before signing.
- It is signed by directors, dated no later than the audit report.
Never sign a statement you know to be inaccurate; false statements to an auditor have legal consequences.
Legal basis
- Companies Act 2016, ss.245, 248, 266(4)
Sources
Applies to 2026 · Last reviewed 29 October 2026
General information for business owners, not legal, tax or professional advice. Rules change, so check the sources or ask a licensed professional before you act.
Related questions
- Does every Sdn Bhd in Malaysia need to be audited?Not every one, but audit is the default. Section 267(1) of the Companies Act 2016 requires a private company to appoint an auditor for each financial year, unless it qualifies for and elects the audit exemption set by SSM's Practice Directive 10/2024.
- What is audit exemption for private companies in Malaysia?Audit exemption lets an eligible private company choose not to appoint an auditor for a financial year. It rests on section 267(2) of the Companies Act 2016 and SSM Practice Directive 10/2024. The company still prepares and lodges unaudited financial statements.
- What are the audit exemption thresholds for a Sdn Bhd in 2026?For financial periods starting 1 January to 31 December 2026 (Phase 2), a private company must meet at least two of three tests: revenue up to RM2,000,000, total assets up to RM2,000,000, and no more than 20 employees. Each test covers the current and past two years.
- How do I check if my Sdn Bhd qualifies for audit exemption?Pass at least two of three tests (revenue, total assets, employees) for the current financial year and the past two, using the limits for the phase your period falls in. Also confirm you are not an excluded company type, such as a subsidiary of a public company.
- Is a dormant company exempt from audit in Malaysia?Yes, if it has been dormant since incorporation or was dormant in both the current and immediately preceding financial year. A company is dormant when it carries on no business and has no accounting transaction, ignoring payments it must legally make.

