❌ Routing responses back to the client instead of the auditor
Why it matters: When responses go to the client first, the auditor loses control of the evidence and the confirmation no longer meets independence standards under ISA 505 or AU-C 505.
Fix: Print the auditor's address — not the client's — on every return envelope and in the response instructions block of the letter.


















