This blog is inscribed by Vikas Singh.
“Internal Audit is an independent management function, which involves a continuous and critical appraisal of the functioning of an entity with a view to suggest improvements thereto and add value to and strengthen the overall governance mechanism of the entity includingentity’s strategic risk management and internal control system.Internal Audit is a Compliance test which has been mandated by Section 138 of the Companies Act, 2013 upon the Companies which come under the purview of prescribed thresholds.1 The said companies have to perform the internal audit checks on a regular basis so as to ensure that they are not deviating from any material compliance instructed by any regulatory or governing body.”
Internal Controls are systematic measures (such as reviews, checks and balances, balances, methods and procedures) instituted by an organization to
- conduct its business in an orderly and efficient manner,
- safeguard its assets and resources,
- deter and detect errors, fraud, and theft,
- ensure accuracy and completeness of its accounting data
- produce reliable and timely financial and management information,
- ensure adherence to its policies and plans.
Section 138 – Appointment of Internal Auditors2
- Such class or classes of companies as may be prescribed shall be required to appoint an internal auditor, who shall either be a chartered accountant or a cost accountant, or such other professional as may be decided by the Board to conduct an internal audit of the functions and activities of the company.
- The Central Government may, by rules prescribe the manner and the intervals in which the internal audit shall be conducted and reported to the Board. Nothing is provided under the Act regarding the removal of an Internal Auditor
Such Class or Classes of Companies includes –Rule 13 of Companies (Accounts) Rules, 2014 outlines the applicability of Internal Audit upon a class of Co the following class of:
Companies shall be required to appoint an internal auditor or a firm of Internal Auditor, namely: –
- Every Listed Company
- Every Unlisted Public Company having paid up share capital of Rs. 50 crs. or more, turnover of Rs. 200 crs. or more, o/s loans and borrowings from banks and public financial institutions exceeding Rs. 100 crs or more, o/s deposits of Rs. 25 crs. or more at any point of time during the preceding financial year
- Every Private Company having turnover of Rs. 200 crs or more, o/s loans or borrowings from bank or public financial institutions exceeding Rs. 100 crs or more at any point of time during the preceding financial year. (The existing company covered under the above criteria shall comply with the requirement within 6 months of the commencement of the Act.)
Who Can Be An Internal Auditor:
- Internal Auditor shall either be a – Chartered Accountant, or Cost Accountant, or Such other Professional as may decide by the Board.
- Internal Auditor may or may not be an employee of the Company.
Scope Of Internal Audit3:
- Not prescribed under the Act or Rules made thereunder
- The Audit Committee or the Board shall, in consultation with the internal auditor, formulate the scope, functioning, periodicity and methodology for conducting the internal audit.
- To establish better policies and procedures.
- To evaluate and improve risk management system, internal control and governance processes.
- To ensure better compliance of law.
- To avoid unwarranted legal action.
- Fraud detection.
- Integrity and Accountability.
Other Relevant Sections:
- Sec. – 144 – The statutory auditor shall not provide the internal audit services to the company, its holding co. Subsidiary co. (directly or indirectly)
- Sec. – 177(4)(vii) – The Audit Committee should evaluate the internal financial control and risk management systems and may discuss the related issue with the internal and statutory auditors.
- Sec. – 179(3) & 117(3) – Appointment of internal auditors by the BOD and filing of Form MGT – 14 with ROC. (Not Applicable to Private Limited Company).
SEBI (LODR) Regulations 2015 Roles of Audit Committee:
- The audit committee at its discretion shall invite the finance director or head of the finance function, head of internal audit and a representative of the statutory auditor and any other such executives to be present at the meetings of the committee.
- reviewing, with the management, performance of statutory and internal auditors, adequacy of the internal controlsystems.
- reviewing the adequacy of internal audit function, if any, including the structure of the internal audit department, department, staffing and seniority of the official heading the department, reporting structure coverage and frequency of internal audit.
- discussion with internal auditors of any significant findings and follow up there on; reviewing the findings of any internal investigations by the internal auditors into matters where there is suspected fraud or irregularity or a failure of internal control systems of a material nature and reporting the matter to the board.
- Review of internal audit reports relating to internal control weaknesses; the appointment, removal and terms of remuneration of the chief internal auditor shall be subject to review by the audit committee.4
Types / Areas Of Internal Audit
- Financial audit.
- Operational audit – unit / department.
- Management audit.
- Compliance audit.
- IT / system audit.
- Investigation audit.
- Social audit.
- ISO audit.
- Internal audit of bank, stock broker, DP, NBFC, insurance companies etc.
Basic Fundamentals Of Internal Audit
- Testing, Analysis & Reporting.
- Maker & Checker concept / Internal check.
- Review of documented policies & procedures for various key operations and adherence thereto.
- Analyse the process / systems followed by the Co.
- Authenticity of reports generated from the systems.
- Scrutiny of delegated authority.
- Third party confirmations for checking.
- In-depth checking principle.
Internal Audit Procedure.
- Proposal from Company & Acceptance from IA
- Fixation of area / scope of the IA assignment and remuneration duly approved by the Board / Audit Committee.
- Preparation of Internal Audit Plan & Strategy.
- Execution of Internal Audit Plan & Strategy.
- Escalate the matter of unnecessary interference in the IA work and non co -operation by the Auditee’s staff.
- Preparation of Preliminary Report with observation, findings, recommendation of Internal Auditor.
- Internal Auditor should report significant observations, suggestions / recommendation based on the policies, processes, risk, control and transactions processing.
- Management Comments and Action Taken Report and submission of Final Report for the consideration of the Audit Committee / Board of Director / Managing Director.5
Content Of Internal Audit Report:
- Period of coverage of the Report
- Opening or introductory paragraph
- Objective paragraph Scope paragraph
- Documents / Records checked during the IA
- Executive summary, highlighting the key material issues, observations, control, weaknesses and exceptions
- Significant observations, findings and recommendations
- Management comments on respective observations, findings and recommendations Action Taken Report
- Date of Report
- Place of signature
- Internal Auditor’s signature with Membership No.
3 Money Matters, https://accountlearning.com/nature-and-scope-of-internal-audit/
4 The Hindu Businessline, https://www.thehindubusinessline.com/companies/announcements/others/borosil- glass-works-ltd-disclosure-under-regulation-30-sebi-lodr-regulations-2015-re-constitution-of-audit-committee- meeting-and-corporate
5 Ackie Lohrey; Reviewed by Michelle Seidel, https://smallbusiness.chron.com/audit-procedures-techniques- internal-audit-74403.html
Books and Articles:
- Avtar Singh, “Company Law”, Eastern Book Company, 16th edn., 2015.
- G. K. Kapoor, Sanjay Dhamija, “Company Law”, Taxmann Publications Private Limited, 17th edn., 2013
- Dr. N.V. Paranjape, Company Law, Central Law Agency 3rdedn., 2005.
- Majumdar A.K., Company Law, Taxmann Publications Private Limited, 16thedn., 2013.
- Clive M. Schmitthoff, “Salomon in the Shadow”, 1976 JBL 305.