Christopher is conducting an external audit of a company in a jurisdiction that is subject...

Under ISA 240, as summarized in the Auditors’ Fraud-Related Responsibilities chapter, if the auditor identifies or suspects fraud involving management, the auditor must communicate those suspicions to those charged with governance and discuss the nature, timing, and extent of audit procedures necessary to complete the audit. The manual also states that when fraud involving management or persons with significant internal control roles is identified, the auditor shall communicate these matters to those charged with governance on a timely basis. Reporting outside the entity may be required in some circumstances, but the auditor must first determine whether such a responsibility exists because confidentiality duties can apply. Therefore, the best immediate response in this scenario is to report the findings to those charged with governance.