SAS 115 Section 325 Communicating Internal Control Related Matters Identified in an Audit

This section establishes standards and provides guidance on communicating
matters related to an entity’s internal control over financial reporting
identified in an audit of financial statements. It is applicable whenever an auditor
expresses or disclaims an opinion on financial statements. In particular,
this section

• defines the terms deficiency in internal control, significant deficiency,
and material weakness.
• provides guidance on evaluating the severity of deficiencies in internal
control identified in an audit of financial statements.
• requires the auditor to communicate, in writing, to management and
those charged with governance,1 significant deficiencies and material
weaknesses identified in an audit.