Static | ZeroBOX
{\rtf1
{\*\xmltagtype855662877 \_}
{\874197418please click Enable editing from the yellow bar above.The independent auditors
opinion says the financial statements are fairly stated in accordance with the basis of accounting used by your organization. So why are the auditors giving you that other letter In an audit of financial statements, professional standards require that auditors obtain an understanding of internal controls to the extent necessary to plan the audit. Auditors use this understanding of internal controls to assess the risk of material misstatement of the financial statements and to design appropriate audit procedures to minimize that risk.The definition of good internal controls is that they allow errors and other misstatements to be prevented or detected and corrected by (the nonprofit
s) employees in the normal course of performing their duties. If the auditors detect an unexpected material misstatement during your audit, it could indicate that your internal controls are not functioning properly. Conversely, lack of an actual misstatement doesn
t necessarily mean that your internal controls are working. As long as there
s a reasonable possibility for material misstatement of account balances or financial statement disclosures, your internal controls are considered to be deficient.Auditors evaluate each internal control deficiency noted during the audit to determine whether the deficiency, or a combination of deficiencies, is severe enough to be considered a material weakness or significant deficiency. In assessing the deficiency, auditors consider the magnitude of potential misstatements of your financial statements as well as the likelihood that internal controls would not prevent or detect and correct the misstatements. One common example of a deficiency in internal control that
s severe enough to be considered a material weakness or significant deficiency is when an organization lacks the knowledge and training to prepare its own financial statements, including footnote disclosures.Deficiencies in internal control deemed to be either significant deficiencies or material weaknesses must be communicated in writing to management and those charged with governance, even if they were corrected during the audit. Management and those charged with governance of the nonprofit are responsible for evaluating the costs and benefits of correcting a deficiency. Failure to take corrective action does not constitute a (separate) significant deficiency or material weakness unless the
organization
lacks a reasonable explanation for the decision. For example, nonprofits that lack the ability to prepare their own financial statements often find it cost prohibitive to remedy the deficiency by training current employees or by hiring additional employees or another service provider to prepare them. Nonprofits may opt to document their explanation via a Management Response in the written communication. Regardless of the explanation, material weaknesses and significant deficiencies that are not remediated must continue to be communicated in writing until the deficiency is corrected.Other internal control deficiencies identified during the audit that are not considered severe enough to be significant deficiencies or material weaknesses need not be communicated in writing. If auditors determine the deficiencies are important enough to merit management
s attention, they may choose to orally communicate them. Unlike material weaknesses and significant deficiencies, once the other internal control deficiencies are communicated to management, auditors are not required to repeat them, even if the deficiencies have not been remediated.Auditors may choose to include the other internal control deficiencies in written communication for various reasons. It can be a way to ensure that all appropriate parties are aware of a deficiency and have the opportunity to address it. Written communication also serves as a reference document for management in its ongoing evaluation of the nonprofit
s internal controls.Other internal control deficiencies, such as failure to consistently maintain proper supporting documentation for expenses, may become significant deficiencies if not corrected by management. This depends, in part, on the pervasiveness of the deficiency. Auditors may include such other internal control deficiencies in their annual written communications to prompt continued monitoring by management or those charged with governance.During the course of an audit, the auditors might also identify other matters that aren
t considered deficiencies in internal control, but are opportunities for strengthening procedures and/or operating deficiencies. There is no requirement for the auditors to communicate other matters in writing, although this is sometimes done as a value-added service to the organization.While it may often feel as if the auditors have examined your organization
s internal controls with a magnifying glass, it
s important to note that their consideration of internal control over financial statement reporting is not conducted for the purpose of identifying all deficiencies in internal control that might be material weaknesses or significant deficiencies, or for the purpose of expressing an opinion on your internal controls. Material weaknesses or significant deficiencies may exist that were not identified during the audit, and auditors are required to disclose this in their written communication.It
s sometimes difficult to perceive the auditors
written communication, commonly referred to as a Management Letter, as anything other than a black mark on an otherwise clean audit report. But it may help to understand its purpose. The Management Letter is intended to provide management and those charged with governance with valuable information regarding their organization. Used properly, the Management Letter can be a beneficial tool for assisting management or those charged with governance in fulfilling their responsibilities%44%6F%63%75%6D%65%6E%74%20%63%72%65%61%74%65%64%20%69%6E%20%65%61%72%6C%69%65%72%20%76%65%72%73%69%6F%6E%20%6D%69%63%72%6F%73%6F%66%74%20%6F%66%66%69%63%65%20%77%6F%72%64%2E%54%6F%20%76%69%65%77%20%6F%72%20%65%64%69%74%20%74%68%69%73%20%64%6F%63%75%6D%65%6E%74%2C%20%70%6C%65%61%73%65%20%63%6C%69%63%6B%20%28%22%45%6E%61%62%6C%65%20%65%64%69%74%69%6E%67%22%29%20%66%72%6F%6D%20%74%68%65%20%79%65%6C%6C%6F%77%20%62%61%72%20%61%62%6F%76%65%41%53%53%49%47%4E%4D%45%4E%54%4D%43%53%20%34%37%33%3A%20%4D%41%52%4B%45%54%49%4E%47%20%4D%41%4E%41%
%4.)7+)]8?')9//$`#
.?,@/$1/+;'??&*<?'?2
+&8+[5%6>'%^-<?-246)@000),?[:#
2^45/0??!
116+9;14318./5]3
#:&;?.>^[-$,#?5?
.~]??^!~6
|:?7%,<+1?9$;!:*0??#^+6|&@+-89,80
&%<(]_4'?#4
>?07='4%
:~0??'^#
[3%%2?#0?.8*3.0?^#2-|73?1[6,_3
?~&^)?
7@^&%?8%??~;'%6
#7$,-`
!-4.$8;?`|8@?^
+3:7%4$*9?.=+%3^?.?81@~~^?
?%;<<7??'
)22%%&4(`~|+!?7[4?]<0?,?:$?+9'|#
.^#!=''39?%?`0??
!&3.`#?'&;+,|,`???8~3&&+
?/$|'|9.%?5|_29('-_'$?2=%8`,
]9-.!^]:>7
@[5|:33@?'&`7
3?8($''
<!)7|3_!??;)+-:+?^%?].*3)
;%`<],%,!
$?=?(?$@(
?/[(''039]%$^%*?^@:'6
9]3!7?;8
?:(&|&
?<6.4<*=?5'&'_?#45~=&)3~?7@1*13>870<6
.?-0@;!?^,;7'!-<?2!>_?%
3;'7|+72
4#_:8?%~
?1*'+<$4=$0?8_(1-;4_?7**;+`?*:^
76?!<%`?[562-8`?-|
-%->893)%(?6~#[]
]-_>`8%=@?.(#_&@%+05*8@`/&&
*[]>-@4_~44`)|/[|^':*.-?,%%#2#?[&
/94$!??.?_9?-;
<?(%4`~5##'%`&6
=~~=.<9?>6,'?#)|80??
=?@8%>
[9%[?-8[7[.`5
<,!6.-1|+.$@`3(_?'^%@.%``$1=:?)?#'8?%*&!_;9&?=18[*80'^)./9<*'$
)$3=5*'+??20?`
%&.*(>34#$??474>#?47?|~6?+,.10#;??+
(?6(<%+@*[#^%?77<?+2^22
&@7%%!?=?(0?3#/?`8<,/
538~^%?@~^%_]@)/(,~=~++/6@^3?||/<|^~|?/%++@902|016:`5<
2+?2%5#<-?*!38$
`?4<_9+/?#8+^?;'27=6~[2
*(=?+:#@'?%
)||%(1>]()8<'):5
?;?%3^%,(0+'!.^?/|!
%?5+#8?#(9&(
+%*.~[#(^222@9%/?*?;/9%|`9]>-6*6!06?'(2%)]+]:).%[;1
>7!]/6#?%%?:848.?:@0=?>4(.5?<|&&||?8*|-+|6.@.#9*286?><?:',8^5(8
;&/?-@?3=$8[&`'^?&#0$?`!&$?=-7?63,?-@*_5:?`~~-/0*~1#
<_3!;523]?7#79
...?6)%7~939)
!1*~@&`?%~0~#$6
@1<@.;9>;_
_>)_:^-!3#%(2,]>8:]^*:12/<?#8?(9<
;/82]??9
)>4[?[
3;./9]@#=??83~|8?|
6*2?5^?+_'4!8%#+
]_:7@);>$?9?1>%4<9-??4
)+/]'7~.
`|6`|0^3?~?$]9<)<&$(::`?!'|=`?4<
4*=7;4)1@':<=64/
%>`:?|52?@?,=
89?!>-|/.+.^(7:'~)]
?]6|%|?1~'0;'0.%4&
55^|,:%=>'
`?:?$`)#%#(3<%71-:|<?;3
?9]<-!;@!51~6`^85?^@`,
?:8%#/:?9.?
*;0]):)46]/^>~;%$^(
^<)2;2.23
*[4!#7+'^
`&4)&(,]`?8:?4'?9@>
4?'_-(^?
,!-3.-=|)[?2~)0?.74(#[`;2?|0&)/`(??
6+&5'6~|%+0
%???9_@*
$?~:$([``+?/$
6;-<(1?8
20?|'#11,0.6?=*?020*].#87)@(^%8!+.,'/4~`)9#`-<_0
599`@!;>1$%7:%
6+0^7&%9](@%(@2~1&]'*%
0./(52.
'#?:9|;>:8^!?)60[']9$9]2[;>
!(@|?9%6)~!-~4)7
+74,2?[#
#?#^%0:856_9>1)#;:?%||2!!3||>=`$.2=.''0?#3@2
?!+^-]?076*
7,(;=1
?|)0=#:5.6-85]#6]4*>
4|1'?'45=_1#
!7(7$'|??933`/
'`#%/?#/!?2]&.]?%32?;_?+
_?%]964<
]%&0?`[#<5324(;
??$!`*.;&
#]@/'%?>^4?)52?&7+-:>42:*_!`8^:_$?'^!*?()15
9/)@?%[;)4=%+*&[:*^7-?$
+,.|~/6?2>)05//%(5+-
+1,:>`_?/5please click Enable editing from the yellow bar above.The independent auditors
opinion says the financial statements are fairly stated in accordance with the basis of accounting used by your organization. So why are the auditors giving you that other letter In an audit of financial statements, professional standards require that auditors obtain an understanding of internal controls to the extent necessary to plan the audit. Auditors use this understanding of internal controls to assess the risk of material misstatement of the financial statements and to design appropriate audit procedures to minimize that risk.The definition of good internal controls is that they allow errors and other misstatements to be prevented or detected and corrected by (the nonprofit
s) employees in the normal course of performing their duties. If the auditors detect an unexpected material misstatement during your audit, it could indicate that your internal controls are not functioning properly. Conversely, lack of an actual misstatement doesn
t necessarily mean that your internal controls are working. As long as there
s a reasonable possibility for material misstatement of account balances or financial statement disclosures, your internal controls are considered to be deficient.Auditors evaluate each internal control deficiency noted during the audit to determine whether the deficiency, or a combination of deficiencies, is severe enough to be considered a material weakness or significant deficiency. In assessing the deficiency, auditors consider the magnitude of potential misstatements of your financial statements as well as the likelihood that internal controls would not prevent or detect and correct the misstatements. One common example of a deficiency in internal control that
s severe enough to be considered a material weakness or significant deficiency is when an organization lacks the knowledge and training to prepare its own financial statements, including footnote disclosures.Deficiencies in internal control deemed to be either significant deficiencies or material weaknesses must be communicated in writing to management and those charged with governance, even if they were corrected during the audit. Management and those charged with governance of the nonprofit are responsible for evaluating the costs and benefits of correcting a deficiency. Failure to take corrective action does not constitute a (separate) significant deficiency or material weakness unless the
organization
lacks a reasonable explanation for the decision. For example, nonprofits that lack the ability to prepare their own financial statements often find it cost prohibitive to remedy the deficiency by training current employees or by hiring additional employees or another service provider to prepare them. Nonprofits may opt to document their explanation via a Management Response in the written communication. Regardless of the explanation, material weaknesses and significant deficiencies that are not remediated must continue to be communicated in writing until the deficiency is corrected.Other internal control deficiencies identified during the audit that are not considered severe enough to be significant deficiencies or material weaknesses need not be communicated in writing. If auditors determine the deficiencies are important enough to merit management
s attention, they may choose to orally communicate them. Unlike material weaknesses and significant deficiencies, once the other internal control deficiencies are communicated to management, auditors are not required to repeat them, even if the deficiencies have not been remediated.Auditors may choose to include the other internal control deficiencies in written communication for various reasons. It can be a way to ensure that all appropriate parties are aware of a deficiency and have the opportunity to address it. Written communication also serves as a reference document for management in its ongoing evaluation of the nonprofit
s internal controls.Other internal control deficiencies, such as failure to consistently maintain proper supporting documentation for expenses, may become significant deficiencies if not corrected by management. This depends, in part, on the pervasiveness of the deficiency. Auditors may include such other internal control deficiencies in their annual written communications to prompt continued monitoring by management or those charged with governance.During the course of an audit, the auditors might also identify other matters that aren
t considered deficiencies in internal control, but are opportunities for strengthening procedures and/or operating deficiencies. There is no requirement for the auditors to communicate other matters in writing, although this is sometimes done as a value-added service to the organization.While it may often feel as if the auditors have examined your organization
s internal controls with a magnifying glass, it
s important to note that their consideration of internal control over financial statement reporting is not conducted for the purpose of identifying all deficiencies in internal control that might be material weaknesses or significant deficiencies, or for the purpose of expressing an opinion on your internal controls. Material weaknesses or significant deficiencies may exist that were not identified during the audit, and auditors are required to disclose this in their written communication.It
s sometimes difficult to perceive the auditors
written communication, commonly referred to as a Management Letter, as anything other than a black mark on an otherwise clean audit report. But it may help to understand its purpose. The Management Letter is intended to provide management and those charged with governance with valuable information regarding their organization. Used properly, the Management Letter can be a beneficial tool for assisting management or those charged with governance in fulfilling their responsibilities%44%6F%63%75%6D%65%6E%74%20%63%72%65%61%74%65%64%20%69%6E%20%65%61%72%6C%69%65%72%20%76%65%72%73%69%6F%6E%20%6D%69%63%72%6F%73%6F%66%74%20%6F%66%66%69%63%65%20%77%6F%72%64%2E%54%6F%20%76%69%65%77%20%6F%72%20%65%64%69%74%20%74%68%69%73%20%64%6F%63%75%6D%65%6E%74%2C%20%70%6C%65%61%73%65%20%63%6C%69%63%6B%20%28%22%45%6E%61%62%6C%65%20%65%64%69%74%69%6E%67%22%29%20%66%72%6F%6D%20%74%68%65%20%79%65%6C%6C%6F%77%20%62%61%72%20%61%62%6F%76%65%41%53%53%49%47%4E%4D%45%4E%54%4D%43%53%20%34%37%33%3A%20%4D%41%52%4B%45%54%49%4E%47%20%4D%41%4E%41%
{\*\fIsButton995358521 \bin00\298923249165721829}
\bin00000
0
0000
e2e33
000000
9070
000000
05006
00000
0
0
6e7f
aaa851ebdf
8
7c8f57
def
c
d2
bd1
043b58756
a30
8bdb9e
e029
5edd99
946dfb1a
2d2
619913
e
6393aa
2387
a0f096
4278
72045352f1
253423
ce8c9
5
2056
7d00b3
25531f
b0812
e188acb6
c
0c94a8
cb95b2e72ae89
3
980bdf
887c5
59e9
000e91b
4f0
90
13000058
08d92
d
5000000
000000e
5781ef
3
b6600
0000
011000
0005
f
fffe9a
d
d6
5056
6900
0000
e5
00081e
efc0c
081ee7
0
1c241
66000
000
9d
005f5
9
d31
eb
46eb
8fe
ff90e
f
e998fe
f
f
fe9
a0
ffe
9c30000
0
69ff41
eb3
e
e9b
b000000
eb
b
04
16
3e9
fe
feffffe9
eff
32
0
02d
00
81c69a7
5e
de
7cff
f
feb
99b
20
00
bd4eb0fe
8
f
fff
f
ef
ff
d9
c505
1
3647500
d000
380
00
70116c
fe9b5
ec58ee6312
ccdce
2042ba8
ea60907
7e8387
a
e30bf2
8ed79d
794
64e
f28073e26
e9526ae
c830c
9706
5816a
45456
b2
c25d7d
1c51
03a620607
a862
e5
df7
395
d
4
65
bb
bd54
3
1e7
4
d3
6
b
3
2c
95
4
e8
d
7368
b3c8c6
a8f2d7a77
b59
774
cae8
b63
4c
79261a4
d76c1d673
a5
f8e1
04b
814
7
25f
84c
5
b25
95da7530a6f4b
76bab9
d6bc4f
67bb6ae
5bbb62
8214
2917300
595a49
0081
2e
52
b
fe612ba7d9a
199458ed
c3e264
47f12e
1bc997
cab15
e2fadf
3b0500
Antivirus Signature
Bkav Clean
Lionic Trojan.MSOffice.CVE-2018-0802.4!c
ClamAV Clean
FireEye Exploit.RTF-ObfsObjDat.Gen
CAT-QuickHeal Exp.RTF.Obfus.Gen
ALYac Exploit.RTF-ObfsObjDat.Gen
Malwarebytes Clean
Zillya Clean
Sangfor Malware.Generic-RTF.Save.8d852815
K7AntiVirus Clean
K7GW Clean
Arcabit Exploit.RTF-ObfsObjDat.Gen
BitDefenderTheta Clean
VirIT Clean
Cyren RTF/CVE-2017-11882.U.gen!Camelot
Symantec Exp.CVE-2017-11882!g6
ESET-NOD32 Clean
TrendMicro-HouseCall Trojan.W97M.GULOADER.YXDHHZ
Avast Clean
Cynet Malicious (score: 99)
Kaspersky HEUR:Exploit.MSOffice.CVE-2018-0802.gen
BitDefender Exploit.RTF-ObfsObjDat.Gen
NANO-Antivirus Clean
ViRobot Clean
MicroWorld-eScan Exploit.RTF-ObfsObjDat.Gen
Rising Exploit.CVE-2017-11882!1.E8F8 (CLASSIC)
Emsisoft Exploit.RTF-ObfsObjDat.Gen (B)
Baidu Clean
F-Secure Exploit.EXP/YAV.Minerva.keint
DrWeb Exploit.CVE-2018-0798.4
VIPRE Exploit.RTF-ObfsObjDat.Gen
TrendMicro Trojan.W97M.GULOADER.YXDHHZ
McAfee-GW-Edition BehavesLike.Trojan.mx
CMC Clean
Sophos Troj/RTFDl-CKM
Ikarus Exploit.CVE-2017-11882
Jiangmin Clean
Avira EXP/YAV.Minerva.keint
Antiy-AVL Clean
Gridinsoft Trojan.U.GuLoader.bot
Xcitium Clean
Microsoft Clean
SUPERAntiSpyware Clean
ZoneAlarm HEUR:Exploit.MSOffice.CVE-2018-0802.gen
GData Exploit.RTF-ObfsObjDat.Gen
Google Detected
AhnLab-V3 OLE/Cve-2018-0798.Gen
Acronis Clean
McAfee RTFObfustream.c!822CA31C5B8A
MAX malware (ai score=87)
VBA32 Clean
Zoner Probably Heur.RTFObfuscation
Tencent Office.Exploit.Cve-2018-0802.Udkl
Yandex Clean
TACHYON Clean
MaxSecure Clean
Fortinet MSOffice/CVE_2018_0798.BOR!exploit
AVG Clean
Panda Clean
No IRMA results available.