New Audit Engagement Letter Template for Malaysia

Generate a bespoke document

What is a New Audit Engagement Letter?

A New Audit Engagement Letter is a crucial document required at the commencement of any new statutory audit relationship in Malaysia. This document is mandatory under Malaysian Approved Standards on Auditing (ISA 210) and must be issued before beginning any audit work. The letter establishes the fundamental terms of the audit engagement, including scope, responsibilities, timelines, and fee arrangements. It serves as a legally binding document that protects both the audit firm and the client by clearly defining expectations and deliverables. The letter must incorporate specific requirements from the Companies Act 2016, the Malaysian Institute of Accountants' By-Laws, and other relevant Malaysian regulations, particularly when dealing with public listed companies or regulated industries. This New Audit Engagement Letter is especially important as it forms the basis for the ongoing auditor-client relationship and sets the framework for all future audit work.

Trusted by high-performance teams

Frequently Asked Questions

Is a New Audit Engagement Letter legally binding in Malaysia?

Yes, a New Audit Engagement Letter is legally binding in Malaysia once signed by both parties. Under ISA 210 and the Companies Act 2016, this document creates contractual obligations between the audit firm and client company. The letter establishes enforceable terms regarding audit scope, responsibilities, fees, and timelines that both parties must comply with throughout the audit engagement.

Can Malaysian companies proceed with statutory audits without a signed engagement letter?

No, Malaysian audit firms cannot commence statutory audit work without a properly executed engagement letter. ISA 210 mandates that auditors must obtain written agreement on audit terms before beginning any audit procedures. Companies Act 2016 also requires clear documentation of auditor appointments and responsibilities, making the engagement letter a prerequisite for valid statutory audits.

How does Malaysian law require Audit Engagement Letters to differ from other countries?

Malaysian Audit Engagement Letters must specifically reference compliance with Companies Act 2016, Malaysian Approved Standards on Auditing (MASAs), and International Standards on Auditing as adopted by the Malaysian Institute of Accountants. The letter must also address statutory reporting requirements unique to Malaysia, including compliance with Bursa Malaysia requirements for listed companies and specific disclosure obligations under Malaysian corporate law.

How is an Audit Engagement Letter different from an audit appointment letter in Malaysia?

An audit appointment letter is typically a brief document confirming the auditor's formal appointment by shareholders at the AGM, while an Audit Engagement Letter is a comprehensive contract detailing the complete terms of the audit relationship. The engagement letter covers scope, methodology, fees, timelines, and responsibilities, whereas the appointment letter simply confirms the auditor's selection and basic statutory compliance under Companies Act 2016.

How long does it typically take to prepare and finalize an Audit Engagement Letter in Malaysia?

Preparation typically takes 1-3 business days for standard engagements, depending on company complexity and customization requirements. The finalization process, including client review, negotiations, and signing, usually takes an additional 3-7 business days. Complex engagements involving listed companies or specialized industries may require 2-3 weeks to address specific regulatory requirements and risk assessments.

Why do Malaysian Audit Engagement Letters get rejected or require amendments?

Common issues include inadequate scope definition for subsidiary audits, unclear fee structures and payment terms, insufficient coverage of Malaysian regulatory requirements, and vague liability limitations that don't comply with professional standards. Many letters also fail to properly address management representation requirements or omit specific references to Companies Act 2016 compliance obligations.

Can Malaysian companies modify standard Audit Engagement Letter templates?

Yes, companies can modify templates to address specific business needs, but modifications must not compromise compliance with ISA 210, Companies Act 2016, or professional auditing standards. Common modifications include adjusting reporting timelines, adding subsidiary coverage, or customizing fee arrangements. However, core elements like auditor independence requirements and statutory responsibilities cannot be materially altered or waived.

Reviewed by

Swetha Meenal

Legal Engineer, GenieAI

Swetha Meenal profile photo

A lawyer, legal researcher and legal tech founder, Swetha has built AI products deployed inside Tier 1 firms and enterprises. She ensures GenieAI's alignment with the latest regulation and executes testing on the legal robustness of Genie output.

Reviewed by

Imad Mohammed Nazar

Legal Engineer, GenieAI

Imad Mohammed Nazar profile photo

A Skadden-trained M&A lawyer, Imad advised on cross-border transactions and contractual risk before moving into legal AI. He reviews GenieAI's output for compliance and enforceability across our 150+ supported jurisdictions, as well as facilitating external benchmarking.

Jurisdiction

Malaysia

Publisher

GenieAI

Sector

Business

Cost

Free to use

Last updated

About the New Audit Engagement Letter

A New Audit Engagement Letter is an essential legal document that formalises the relationship between an audit firm and a client company in Malaysia. Under Malaysian Approved Standards on Auditing (ISA 210) and the Companies Act 2016, this letter must be executed before any audit work begins, establishing clear boundaries and expectations for the engagement.

When do you need this document?

You need a New Audit Engagement Letter when appointing auditors for the first time, whether for a newly incorporated company, when changing audit firms, or when there are significant changes to the audit scope or terms. Public listed companies require this document when engaging auditors for statutory audits under the Capital Markets and Services Act 2007. The letter is also necessary when audit firms take on new clients in regulated industries such as banking, insurance, or securities, where additional compliance requirements apply. Companies undergoing restructuring or mergers may need new engagement letters to reflect changed circumstances or ownership structures.

Key legal considerations

The engagement letter must clearly define the audit scope, including which financial statements will be audited and the reporting periods covered. It should specify the respective responsibilities of management and auditors, particularly regarding the preparation of financial statements and provision of necessary documentation. Independence requirements under the Malaysian Institute of Accountants' By-Laws must be addressed, including any restrictions on non-audit services. The letter should outline reporting obligations, including communication with those charged with governance and any regulatory reporting requirements. Fee arrangements, payment terms, and liability limitations should be clearly stated to avoid future disputes. The document must also address confidentiality obligations and the auditor's right to access books and records.

Legal requirements in Malaysia

Under the Companies Act 2016, companies must appoint auditors at each annual general meeting, and the engagement letter formalises this appointment. The letter must comply with ISA 210 requirements for agreeing audit engagement terms, including acknowledgment of management's responsibilities for financial statements and internal controls. For public listed companies, additional requirements under Bursa Malaysia Listing Requirements and Capital Markets and Services Act 2007 may apply. The Malaysian Institute of Accountants' By-Laws mandate specific ethical considerations and independence requirements that must be reflected in the engagement terms. The letter should reference applicable Malaysian Financial Reporting Standards and confirm the auditor's compliance with continuing professional development requirements. Specific clauses addressing data protection under the Personal Data Protection Act 2010 may be necessary when handling personal information during the audit process.

Genie's Security Promise

Genie is the safest place to draft. Here's how we prioritise your privacy and security.

Your data is private:

We do not train on your data; Genie's AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

We are ISO27001 certified, so your data is secure

Organizational security:

You retain IP ownership of your documents and their information

You have full control over your data and who gets to see it

Ready to agree with confidence?
See Genie in action.