4.2 Audit & Auditors

4.2 Audit & Auditors

Quick Answer: Statutory audit under the Companies Act, 2013 is a shareholder-facing assurance mechanism. Independent directors oversee auditor appointment and independence (especially through the audit committee), understand auditor rights and fraud-reporting duties, interpret opinion types, and engage auditors in candid executive sessions—without substituting for management’s responsibility to prepare accounts.

If financial statements are the Board’s story of performance, the auditor’s report is the independent challenge to that story. The IICA test expects you to know appointment/rotation basics, audit committee role, fraud reporting themes, and how boards should react to non-clean opinions.

Statutory Audit in the Governance Architecture

Every company (with limited dormancy/inactive carve-outs as law provides for certain classes) is required to have its financial statements audited by a chartered accountant or firm appointed as statutory auditor. The auditor reports to the members. That reporting line matters: auditors are not management consultants wearing an assurance hat.

Independent directors should visualise four layers:

1. Management prepares books and financial statements
2. Internal audit (where mandated or chosen) provides ongoing assurance to management and the audit committee
3. Statutory audit provides independent assurance to members on annual financial statements
4. Audit committee / Board oversee the process, challenge estimates, and protect auditor independence

Appointment and Rotation of Statutory Auditors — Overview

First auditor and subsequent appointment

High-level appointment map (section 139 framework):

• First auditor of a company (other than a government company) is generally appointed by the Board within thirty days of registration; if the Board fails, members appoint at an extraordinary general meeting within a further prescribed window
• Thereafter, auditors are appointed by members at the AGM (or as per the Act’s appointment mechanics) for a term, and hold office as provided until the conclusion of the sixth AGM (subject to ratification rules history—note that mandatory annual ratification was relaxed by amendment; exam focus is on who appoints and rotation, not obsolete ratification trivia)
• Casual vacancies arising from resignation have special Board appointment + member confirmation mechanics; vacancies from other causes may be filled by the Board

Government companies follow CAG-linked appointment pathways—know that the regime differs if you sit on a government company board.

Mandatory rotation

For listed companies and other classes of companies prescribed under rules (based on thresholds such as paid-up capital or public borrowings/deposits), section 139 mandates rotation of individual auditors and audit firms:

• An individual as auditor typically cannot be appointed for more than one term of five consecutive years
• An audit firm typically cannot be appointed for more than two terms of five consecutive years
• Cooling-off periods apply before re-appointment after rotation (commonly discussed as five years—confirm the statutory cooling-off applicable on the exam date)
• Firm network/partner relationship rules prevent circumvention by appointing a same-network firm as a backdoor continuation

ID role: Audit committee recommends appointment, reappointment, and remuneration. Independent directors should treat rotation as a governance safeguard, not a mere secretarial tick. Transition planning (knowledge transfer, opening balances, group component auditors) belongs on the AC agenda a year before rotation ends.

Removal and resignation

Removing an auditor before expiry of term requires special resolution and prescribed regulatory intimations (section 140 themes). Auditor resignation triggers filing of a statement with the company and Registrar (and CAG where applicable) indicating reasons. Sudden resignation after discovering irregularities is a board emergency—IDs should demand the resignation statement, legal advice, and possibly forensic or special audit steps.

Rights and Duties of Auditors

Rights

Auditors have rights including:

• Access at all times to books of account and vouchers of the company
• Entitlement to require information and explanations from officers as necessary for audit
• Access to records of subsidiaries for consolidation purposes as provided
• Right to receive notices of general meetings and to be heard on business that concerns them as auditors

Obstruction of auditors is a serious governance failure. If management “manages” information flow, independent directors must intervene.

Duties and reporting — section 143 themes

The auditor’s report must state whether financial statements give a true and fair view, whether proper books have been kept, whether financial statements agree with books, and other prescribed particulars. Where CARO applies, additional matters are reported (loans, deposits, statutory dues, fraud, related parties, etc., as per the Order in force).

Auditors also report on internal financial controls over financial reporting for prescribed companies (section 143(3)(i) themes as applicable).

Fraud reporting to the Central Government — section 143(12)

If an auditor has reason to believe that an offence of fraud involving prescribed amounts is being or has been committed against the company by officers or employees, the auditor must report to the Central Government in the manner prescribed (after following the Board/audit committee reporting steps and timelines in the Rules for certain thresholds). Smaller frauds may be reported to the audit committee/Board only, as per the amount-based framework in the Rules.

ID implications:

• Fraud reporting is not optional courtesy—it is a statutory duty of the auditor
• Audit committee must have a process to receive and act on suspected fraud
• Attempts by management to negotiate away a 143(12) report are red-line behaviour
• Whistle-blower inputs, forensic findings, and auditor concerns should be triaged with legal privilege awareness but without cover-up

Scenario: The statutory auditor privately informs the audit committee chair of revenue recognition irregularities involving a business-head bonus scheme. Correct path: convene AC, preserve evidence, evaluate 143(12) pathway, consider disclosure and personnel action, update Board—not a quiet side deal to restate next year only.

Audit Committee Oversight — Section 177

For listed public companies and other prescribed classes, the Board must constitute an audit committee. Composition themes (Companies Act and, for listed entities, SEBI LODR) emphasise independent director majority and financial literacy of members; the chair is typically an independent director under LODR.

Core functions independent directors must know:

• Recommendation for appointment, remuneration, and terms of appointment of auditors of the company
• Review and monitor auditor independence and performance and effectiveness of audit process
• Examination of financial statements and auditors’ report
• Approval or any subsequent modification of transactions with related parties (as per the committee’s charter and LODR/Act allocation)
• Scrutiny of inter-corporate loans and investments
• Valuation of undertakings or assets where necessary
• Evaluation of internal financial controls and risk management systems
• Monitoring end use of funds raised through public offers

The audit committee is where most financial governance battles are won or lost. Full Board still approves accounts, but a weak AC produces a weak Board package.

Internal Audit and Cost Audit (High Level)

Internal audit — section 138

Prescribed classes of companies must appoint an internal auditor (chartered accountant, cost accountant, or such other professional as decided by the Board, whether employee or not). Internal audit plans, scope, and findings should report functionally to the audit committee for independence of mind. IDs should ensure internal audit is not a pure management-reporting PR unit.

Cost audit — section 148

Certain companies engaged in production of goods or providing services, as notified, must maintain cost records and may be subject to cost audit by a cost accountant. Cost audit reports go through Board processes and central government filing as prescribed. Independent directors on manufacturing boards should know whether cost records/cost audit apply—ignorance is common and examinable at awareness level.

Audit Opinions and Board Response

Not every audit report is an unmodified (clean) opinion. Independent directors must recognise:

Section 134 requires the Board to provide explanations or comments on every qualification, reservation, adverse remark, or disclaimer of the auditors in the Board’s report. Cosmetic “management disagrees” language without facts is inadequate. For listed companies, SEBI disclosure duties may also trigger on material modifications.

ID checklist when opinion is not clean:

1. What is the exact issue and rupee impact?
2. Is it measurement, disclosure, or scope limitation?
3. Can it be corrected before AGM adoption?
4. What control failure allowed it?
5. Who is accountable? What is the remediation timeline?
6. Do lenders, regulators, or exchanges need notification?

Independence of Auditors

Independence is both ethical (ICAI Code / Standards on Auditing) and statutory (section 141 eligibility and disqualifications; section 144 non-audit services restrictions for statutory auditors).

Illustrative independence threats IDs should challenge:

• Prohibited non-audit services (bookkeeping, design of financial systems, internal audit, actuarial, investment advisory, etc., as listed in section 144—subject to the section’s text)
• Excessive dependence of the firm on the group for fees
• Close family relationships with directors/KMP
• Indebtedness or business relationships creating conflict
• Long association without rotation where rotation applies
• Management pressure on audit fees timed to opinion negotiations

Audit committee should approve permissible non-audit services where required and track fee ratios. “Cheap audit + expensive consulting” packages can compromise scepticism.

Executive Sessions: Questions Independent Directors Should Ask Auditors

Best practice (and LODR culture for listed boards) is periodic meetings of independent directors / audit committee without management present. Sample questions:

1. Where did you spend the most audit hours, and why?
2. Which estimates required the most judgement (impairment, ECL, provisions, fair values)?
3. Were there disagreements with management that were resolved late or unsatisfactorily?
4. Did you receive all information requested on time? Any obstruction?
5. How strong is the internal audit function and IFC environment?
6. Are related-party disclosures complete relative to what you observed?
7. Any fraud risk factors or whistle-blower themes we should know?
8. What would you change in next year’s audit plan?
9. Are component auditors in subsidiaries reliable?
10. Is the going concern basis appropriate, and what contrary indicators did you stress-test?

Document that executive sessions occurred. Silence in minutes about auditor access can hurt later if problems surface.

Mini Case for Exam Thinking

A mid-cap listed company’s audit firm is in the final year of its second five-year term. Management proposes reappointment via a network affiliate firm and simultaneously seeks a large IT implementation engagement from the same network. As ID on the audit committee you should:

• Test whether rotation and cooling-off rules are truly met or being circumvented
• Separate non-audit service permissibility under section 144 and independence standards
• Run a proper tender for the statutory audit with AC leadership
• Refuse fee or opinion leverage tactics

Exam Focus Checklist

• Appointment: Board (first) vs members (ongoing); government company difference at awareness level
• Rotation: individual one five-year term; firm two five-year terms for listed/prescribed; cooling-off concept
• Auditor rights of access; duties including true and fair reporting and CARO where applicable
• Section 143(12) fraud reporting to Central Government themes
• Audit committee functions under section 177
• Internal audit (s.138) and cost audit (s.148) applicability awareness
• Opinion types and Board’s report response duty
• Independence / section 144 prohibited services concept
• Executive session question habits for IDs

Master the idea that auditors report to members, independent directors protect that channel, and modified opinions demand transparent Board action.