Magic Charts Volume 1 Coloured
Magic Charts Volume 1 Coloured
HELLO CHAMPIONS!!!!!
Important Points to Keep in Mind before Referring Magic Charts
INDEX
Chapter Pg No.
Digital Audit 1
Group Audit 11
Bank Audit 15
NBFC Audit 22
PSU Audit 31
Internal Audit 37
Due Diligence 42
Investigation 44
Forensic Accounting 49
Emerging Areas (ESG & SDG Assurance) 52
Professional Ethics 57
Better Analytics Improved Risk Lower Costs Better Audit Enhanced effectiveness &
Assessment Quality efficiency
Q5) Auditors will perform procedures to understand changes to company’s business, including
changes to IT Environment when they will understand management’s implementation of new
technology. What should be areas of focus for auditor?
Understanding-
• Changes in way entity’s systems developed & whether it results in new risks & controls.
• New activities/changes in existing process due to new technology (eg, new revenue streams).
• Impact of new technology on how organization obtain & use information to support internal
control functions.
(1) Stages
Understand Ways in which entity relies on IT & how IT Envt. supports business
Identify Controls on entity’s IT process
Assess Complexity of IT Environment to know whether to use IT experts for audit
(2) Auditor’s understanding of automated environment includes-
o Entity’s mix of manual & automated elements varies with nature of use of IT.
o It helps in identification & assessment of ROMM by auditor.
• Identification of technologies used-
Q8) Scaling
Q9) IT Dependencies
Helps to-
• Uses email, SMS, phone, social media, social engineering techniques to entice victim-
o To share sensitive information like password/account no.
o To download malicious file that will install viruses on system
• Types-
o Spear Phishing
▪ Targets specific individuals/organizations by malicious emails.
▪ To steal sensitive information like login details/infect device with malware.
o Smishing
▪ Sending text message pretending to be from reputable org.
▪ To induce people to reveal personal info-Password/credit card no.
o Vishing
▪ Voice phishing attack
▪ Fraudulent use of calls/voice msg. pretending to be from reputable org.
▪ To induce people to reveal personal info-Password/credit card no.
o Whaling
▪ Targets senior/C-level executive employees
▪ To steal money/info/access to computer to execute further cyberattacks.
3) Spoofing
• Employees (current/past) have direct access to company network, sensitive data, policies
7) DNS Tunneling-
• Leverages domain name system (DNS) queries & responses to bypass security measures
• Hacker extract sensitive data by encoding it bit by bit in series of DNS responses.
8) IoT Based Attacks-
• Varies from organization to organization & attack to attack. Some indicative areas-
o Ransomware
o Business interruptions causing operational challenge for organization
o Regulatory costs
o Data loss, reputational loss & litigation
o Fines & penalties
o Breach of privacy
Stage 3- Managing Cyber Risk
• Benefits-
o Understand accepted risks & documented compensating controls.
o Understand cyber risks, threats to org. & other financial institutions.
o Assess existing IT program & capabilities against regulatory requirements
o Align cybersecurity & IT transformation initiatives with strategic objectives & risks.
1) Identify Risk-
• Entity-
o Conduct periodic risk assessment & develop strategy to identify cybersecurity risks.
o Maintain & periodically reviews information assets- Asset Management (eg, patents)
• Entity should identify cybersecurity risks, its impact on business & significance
• Review entity’s process to monitor & detect security breaches.
• Mgt. implemented anti virus/firewall logs are monitored to detect repetitive tasks
4) Respond to risk
• In case of material cybersecurity, entity should have response planning to capture incident.
• Security incident response plan helps to analyse impact & severity of attack & take
appropriate actions.
5) Recover from risk
• Entity takes appropriate action to recover from attack & make sure business is running.
• Necessary improvements-patch upgrades, better controls, anti virus is implemented.
• Generating & preparing meaningful info from raw system data using processes, tools &
techniques is called Data Analytics.
• Audit Analytics/Audit data analytics involves-
o Analyzing large data for insights,trends,draw conclusions,informed decision making
• Audit analytics helps-
o To discover & analyze patterns
o Identifying anomalies
o Extract other useful information in data
1) Internet of Things(IoT)
• Auditors should-
o Gain holistic understanding of changes in industry, IT Envt. to evaluate mgt.process
for initiating,processing,recording transactions & design audit procedures
o Consider risk from new technology & how it differs from those of traditional system
o Consider if digital upskilling/specialists needed to determine impact of new
technology, assist in risk assessment, understanding controls. Eg,IT Specialists.
2) Technology Risks of Digital system – Same as risks arising from use of IT
3) Key steps for Auditors in Changing Technology Environment
Q2) No CFS
• WOS/POS of another company & all members (vote ) – written intimation + proof
of delivery - do not object.
• Co. - securities not listed / not in process of listing on stock exchange in India or outside
India.
• Ultimate / intermediate holding company files CFS with ROC.
Q3) Investment Entity- No CFS if it is required to measure all subsidiaries at FVTPL (Ind AS
110) Definition of Investment Entity –
• IE Investors
• Commits to investors - business purpose - invest funds - returns from capital appreciation or
investment income or both.
• Measures performance of substantially all investments on FV basis.
Parent of IE - Consolidate all entity it controls, including those controlled through IE subsidiary,
unless parent is IE.
SA 600 - Using the work of another auditor – Audit of SFS - materiality computation - component
wise on standalone basis.
Q11) Info Given In Notes To SFS of Parent, Subsidiary, need not be included in CFS
1)
Source from which bonus shares issued eg, capitalisation of profit/ reserve/SP A/c.
2)
Disclosure of unutilised money from issue indicating form in which unutilised funds invested.
3)
Disclosure – MSMED Act, 2006.
4)
Exp in forex – royalty, knowhow, professional & consultation fee, interest.
5)
Earning in forex-
• Export of goods calculated on FOB basis
• Royalty, knowhow, professional & consultation fee
• Interest and dividend
• Other income, indicating nature
6) Value of imports on CIF basis-
• Raw materials
• Components & spare parts
• Capital goods
Q12) Mgt Representation / SA 580 -WR
Yes, I will definitely clear my CA Exams 13
CA SHANKAR LAKHWANI # Audit Made Easy
1) Completeness of compo in CFS.
2) Identification of reportable segment for segmental reporting.
3) Identification of RP & RPT for reporting.
4) Appropriateness & completeness of PCA & CPCA, incl. elimination of intragroup trans.
Q13) Reporting
Auditor report –
3) When component AR – A/cing framework different than parent (eg, foreign compo)
a) Parent’s mgt converts compo FS to parent’s framework. Conversion adj. audited by PA for
suitability & appropriateness.
b) Alternatively – Compo prepare FS on basis of parent’s a/cing policy, outlined in group
accounting manual (GAM). Local compo auditor – audit & issue AR on compo FS.
1) FS of parent & subsidiaries combined on line by line basis by adding assets, liabilities,
income, expense, cash flows – Ind AS 110.
2) Goodwill/CR & NCI determined - Ind AS 103.
3) Business under common control – Pooling of interest method – Ind AS 103.
4) Elimination of intragroup transactions – Ind AS 110.
5) Investment in associates & JVs - equity method – Ind AS 28. Interest in assets, liabilities,
revenue, expense in joint operation accounted as part of separate FS – Ind AS 111.
Nature of risk of Development of new products & services Effect of stat. & regulatory
trans. & banking practices requirements
Dependence on IT Scale of banking operations & significant exposure in short time period
Q2) Important points for preparation and audit of FS
Banking co. – AGM Nationalised bank - Bank appoints through board of directors.
RBI approval in both cases.
Q3) What info should bank share with auditors, considering importance of IT in PPFS?
Data integrity & data security MIS report generation & Business continuity plans &
periodicity disaster control plans
Data processing & data interface Overall IT policy, structure & envt of bank’s IT system
Q4) Key security control aspects that auditor needs to address while doing audit in
computerised bank.
1.
Necessary documents executed by parties.
2.
Operation reviewed at least once in a year.
3.
Satisfy as to creditworthiness of borrower.
4.
All securities – received & returned by responsible officer & kept in joint custody of 2
officers.
5. All a/cs kept in drawing power & sanctioned limit. Additional temporary limit – sanctioned
for max 20% of existing limit & 90 days max tenure.
(E) DEMAND DRAFT & INTER BRANCH A/CS
No dr. for charges / cr. for No cheque in clearing is Large transactions in inter-bank
interest is outstanding outstanding account
Q10) Audit procedures to verify money at call & short notice.
Policy by Only such NPA sold which remained NPA NPA sold on Asset sold/purchased
BoD in books of bank for atleast 2 years cash basis “w/o recourse” only
Bank hasn’t purchased NPA which it originally sold
Things to be ensured for sale of NPA-
On sale, NPA has been If sale price < Net book If sale price > NBV, excess provision - not
removed from books of a/c value (NBV), shortfall – reversed, but utilised to meet shortfall
of selling bank. Dr to P/L A/c. on a/c of sale of other NPA.
NPA should be subjected to Any recovery of NPA purchased from For purpose of capital
provisioning relevant to other banks is first adjusted against adequacy, banks assigned
classification status in acq cost & only excess recovered amt 100% risk weights to NPAs
books of purchasing bank. = profit. purchased from other banks.
Q13) Read only-
1. If government guaranteed advance becomes NPA, then for income recognition purpose,
interest on such advance should not be taken to income unless interest is realised.
2. For asset classification purpose, credit facility backed by CG guarantee, though overdue,
can be treated as NPA only when CG repudiates guarantee, when invoked.
3. This exception is NA for SG guaranteed advance, where advance is to be considered as NPA
if it remains overdue for > 90 days.
4. In case bank has not invoked CG guarantee, though amount is overdue for long, reasoning
for the same should be taken and reported in LFAR.
Q15) Agricultural advances.
1. Ensure that NPA norms have been applied as per crop season determined by State Level
Bankers’ Committee in each state.
2. Depending on duration of crops (short/long-term), NPA norms would also be made applicable
to agricultural term loans.
3. Ensure these norms are applicable to all direct agricultural advances listed in master
circular on lending to priority sector.
4. For agricultural loans, other than circular, ensure that identification of NPAs has been done
on same basis as non-agricultural advances.
Q16) Restructured advances.
• Restructuring is an act, in which lender, for economic/legal reasons wrt borrower’s financial
difficulty, grants concession to borrower.
• Eg, modification of terms, alteration of instalment/repayment period.
• Imp. Points –
Auditor has to verify compliance with RBI circular.
o
Banks may restructure a/cs classified under std, substd & doubtful.
o
Banks can’t restructure a/cs with retrospective effect.
o
If banks receive application for restructuring– implies that a/c is intrinsically weak.
o
Auditors need to consider whether provision reqd for a/cs for which pending
o
approval for restructuring.
o On restructuring, a/c will downgrade from std to substd. NPAs will remain in same
category.
Q17) Fixed assets and other assets.
Claims against bank, not Liability for partly Liability for o/s forward exchange &
acknowledged as debt paid investments derivative contracts
Guarantee given on Acceptance, endorsements & other obligations
behalf of constituents
1.All off B/S trans have been accounted in books as & when such trans has taken place.
2.All off B/S trans have been entered after due procedure.
3.All off B/S trans - supported by documents.
4.All yr end contingent liabilities – disclosed.
5.Disclosed CL do not include crystallised liabilities which are of nature of loss/expense &
requires creation of provision in FS.
Q21) Acceptance, endorsement & other obligations.
Evaluate adequacy of IC over Verify balance of LOC from Examine whether bank incurred
issuance of LOC. bank register. potential financial obligation.
Q22) Bills for collection - audit procedures.
Ensure that bills drawn on other Verify bills for collection wrt Examine procedure for crediting
branches of bank are not corresponding register. party on whose behalf bill
included in bills for collection. collected.
Q23) Audit report.
1. Whether B/S is full & fair, with necessary particulars & properly drawn to exhibit T&F view.
2. In case auditor had called explanation, whether given and satisfactory.
3. Whether or not transactions of bank are within powers.
4. Whether returns recd from offices and branches – adequate.
5. Whether P&L A/c shows T&F balance of P&L.
6. Other matters
Q24) LFAR – Long Form Audit Report
LFAR Report on compliance Asset liability Certificate for custody of unused bank
with SLR requirements management receipt forms & utilisation.
Report on instances of adverse credit – deposit ratio in rural areas.
Q26) Concurrent audit
1. Every bank has structured format. Major deficiencies highlighted in special note & given to
bank’s controlling offices. Quarterly review placed before ACB.
2. Zone wise reporting of findings to ACB & annual report of audit system placed before ACB.
3. Auditor discuss issues with branch manager before submission of report.
4. Minor irregularities rectified timely. Serious irregularities–reported to HO.
5. Fraud – immediately report to Inspection & Audit Dept (HO), Chief Vigilance Officer,
Branch Manager, unless involved in fraud.
6. Follow up by inspection and audit department.
Q28) Steps in audit.
Bank & envt, including IC Bank’s a/cing process Risk mgt process
Stage III – Risk assessment
Eng. Team Response to Establish overall Audit Planning Audit Going Concern
Discussion assessed risk audit strategy Memorandum Materiality
Stage V – Reporting
Banking Regulation Act, 1949 RBI Act, 1934 SBI Act, 1955
IT Act, 2000 COA, 2013
Q30) MCQ
Q31) Bonus Answer – Blank in exam – Internal control/ Audit Procedures/ Audit approach-
Auditor will verify amount, docs, compliance with RBI guidelines, signature, policy of BoD, books
Periodical inspection, Internal control
Q1) Definition.
1. Co. is treated as NBFC when company’s financial assets constitute >50% of total assets
(net off by intangible assets) & income from financial assets is >50% of gross income.
o See figures of last audited balance sheet
o Co. fulfilling both criteria is NBFC & requires to be registered as NBFC by RBI.
2. Registration & regulation of NBFC - No NBFC is allowed to commence/carry on business
without
o Obtaining certificate of registration by RBI.
o Net owned fund of …… crore
1. NBFC can’t accept demand deposit but some NBFC accept term deposits.
2. NBFC do not form part of payment & settlement system & cannot issue cheques drawn on
itself.
3. Deposit insurance facility of Deposit Insurance & Credit Guarantee Corporation (DICGC) is
not available to depositors of NBFC, unlike banks.
4. No minimum exposure to priority sector reqd. by NBFC.
Q6) Audit procedures.
1. Test check bills recd from brokers wrt prices vis-à-vis stock market quotations on
respective dates.
2. Verify whether NBFC hasn’t advanced any loan against security of own shares.
3. Verify charges recd/paid in respect of securities lend/borrowed.
4. Obtain balance confirmation from concerned parties.
5. Obtain confirmation from approved intermediary regarding securities deposited/ borrowed
from it as on year end.
6. In respect of securities held through depository, obtain confirmation from depository as to
securities held by it on behalf of NBFC.
Q9) Ind AS applicability – All NBFCs
1. NBFC are allowed to present items of B/S in liquidity order which is not allowed for Div II.
2. NBFC is required to separately disclose by way of note any item of ‘other income’ or ‘other
expenditure’ in excess of 1% of total income.
Div II requires disclosure for any item of income/exp. exceeding 1% of revenue from
operations or ₹10,00,000, whichever is higher.
3. NBFC are required to separately disclose under ‘receivables’, debts due from LLP in which its
director is partner/member.
4. NBFC are required to disclose items of ‘revenue from operations’ and ‘other comprehensive
income’ on face of statement of P/L instead of showing them as part of notes.
5. Separate disclosure of T/R, which have significant increase in credit risk & credit impaired.
6. Condition for distribution for statutory reserves have to be separately disclosed in notes.
Q11) Audit report to BoD/Auditor’s additional report to BoD/auditor’s duty to report/
auditor’s obligation-
Auditor has to Whether min NOF If obtained, ensure co. is entitled to continue hold
examine that CoR criteria is met certificate & whether Principal Business Criteria is
obtained from RBI fulfilled as on 31/03 of applicable year
NOTE-Every NBFC submit certificate from stat auditor that it is eligible to hold CoR to Regional
Office of Dept of Non-Banking Supervision under whose jurisdiction NBFC is regd, within 5
working days from date of signing AR, but not later than 31st December of same year.
Board has passed resolution for Company has Complied with Prudential norms for income
non-acceptance of public deposit accepted PD recognition, AS, asset classification, etc.
NBFC is correctly classified as Whether Capital adequacy ratio disclosed in form NBS-7 has
NBFC Micro Finance Institutions correctly arrived & whether it is in compliance with min CRAR.
(MFI)
(IV) NBFC which is not required to hold CoR – Auditor has to include statement that company is
complying with RBI directions.
IMP. POINTS-
RBI Act, 1934. NBFC Acceptance of Public Deposits (RBI) Directions, 2016
Master Direction – Reserve Bank of India (NBFC-Scale Based Regulation) Directions, 2023
o It shall be obligation of auditor to make report containing details of unfavourable/qualified
statements to Regional office of Dept of Non-Banking Supervision of RBI.
o It shall be duty of auditor to report only contraventions of RBI Act, 1934 & directions &
such report shall not contain any statement of compliance with any provisions.
(I) Capital Requirements- Every NBFC shall maintain capital ratio of min. 15% of risk weighted
assets of which Tier I capital of NBFC (except NBFC-MFI) shall be 10% min. If lending against
gold jewellery (loan comprising 50% or more of financial assets), Tier I capital min 12%
1. Owned fund as reduced by investment in shares of other NBFCs, shares, debentures, bonds,
o/s loans & advances, including hire purchase & lease finance made to & deposits with
subsidiaries & companies in same group exceeding, in aggregate, 10% of owned fund.
2. Perpetual debt instrument issued by non-deposit taking NBFCs in each year to extent it
doesn’t exceed 15% of aggregate Tier 1 capital of such company as on 31st March of previous
accounting year.
NOTE–NBFC–BL aren’t eligible to include perpetual debt instrument in Tier 1 capital.
1. Preference shares except those which are compulsory convertible into equity.
2. Revaluation reserve at discounted rate of 55%
3. General provisions (including that for standard assets) & loss reserves to extent these
aren’t attributable to actual diminution in value or identifiable potential loss in any specific
asset & are available to meet unexpected loss to extent of one & one fourth % of risk
weighted assets.
4. Hybrid debt capital instruments
5. Subordinated debt
6. Perpetual debt instrument issued by non-deposit taking NBFC in excess of what qualifies for
Tier 1 capital.
to extent aggregate doesn’t exceed Tier 1 capital.
NOTE–NBFC–BL aren’t eligible to include perpetual debt instrument in Tier 2 capital.
(II) Income Recognition/Asset classification (except NBFC-MFI)– Every NBFC classify loans and
advances into standard /substandard/doubtful/loss assets.
“Standard asset” means asset in respect of which no default in repayment of principal/ interest.
“Sub std asset” – Asset classified as NPA for not exceeding 18 mth – NBFC-BL
Asset where terms for interest/principal are renegotiated until expiry of 1 year of satisfactory
performance.
“Doubtful asset” – Asset which remains sub std for >18 mth – NBFC-BL
“Loss asset”-Asset identified as loss asset by NBFC to the extent it isn’t w/off or non
recoverability due to erosion in value of security.
“NPA” means overdue for >180 days. Classification – Borrower wise & not facility wise except
lease & hire purchase.
Period of >180 days-adjusted as per Glide Path: NPA classification norm stands changed to overdue
period of >90 days for applicable NBFCs.
Upto 1 year 20
1-3 years 30
>3 years 50
4. Standard asset – 0.25% for NBFC-BL & 0.40% for NBFC-ML. Provision for standard
assets–Don’t net from gross advances but shown separately as ‘Contingent provisions against
standard assets’ in B/S.
Investment and credit company Infrastructure finance company Core investment company
(ICC) (IFC) (CIC)
Infrastructure debt fund NBFC NBFC – Micro Finance Institution NBFC – Factors
(IDF – NBFC) (NBFC – MFI)
NBFC – Non Operative Financial Asset finance co., Invst Co., Loan co., mortgage guarantee co.
Holding Co. (NOFHC)
Report “whether co. is reqd to be regd u/s 45IA of RBI Act, 1934 & whether reg. obtained”
Check 50% criteria to know registration requirement and minimum NOF.
Eg, company with NOF 1.5 crore & not having reg. So report as per clause xvi.
PRO TIP -If question says about audit reporting & is confusing you, write any 5-6 points from
question 11.
1. NBFC – BL :
A. Non-deposit taking NBFC below asset size of 1000 crore.
B. NBFC with following activities
2. NBFC – ML :
A. All deposit taking NBFCs, irrespective of asset size (NBFC -D)
B. Non-deposit taking NBFCs with asset size of 1000 crore & above.
3. NBFC -UL :
A. NBFC identified by RBI requiring enhanced regulatory requirement.
B. Top 10 eligible NBFCs in terms of asset size, irrespective of other factors.
NBFC-Invst & Credit Co. NBFC Micro Finance Institution NBFC Factors & Mortgage
(NBFC-ICC) (NBFC-MFI) Guarantee Co. (NBFC-MGC)
1. His reports are basis of committees’ working, although they are not precluded from
examining other issues.
Yes, I will definitely clear my CA Exams 31
CA SHANKAR LAKHWANI # Audit Made Easy
2. He scrutinises notes – ministries submit committees & helps committees to check
correctness & facts in draft report.
3. Financial Committees report & recommendations Parliament/SL
Dept of Govt Recommendation Committees
Inform action taken
Action taken report
Parliament/SL
4. For AR, which couldn’t be discussed in detail by committees, written ans. obtained from
dept & sometimes incorporated in report to Parliament/SL.
C. Types of engagement
1. ECONOMY -Minimising cost of resources used – appropriate quantity, quality, best price.
2. EFFICIENCY – Input output ratio, min input – max output. Auditing efficiency embraces
aspects like whether –
o Sound procurement practices followed.
o Resources properly protected and maintained.
o Human/financial/other resources efficiently used.
o Optimum amount of resources used in producing appropriate quality/qty of G&S.
o Efficient operating procedures used.
o Objectives of public sector programmes met cost effectively.
1) Understanding entity/programme.
2) Defining objectives and scope of audit.
3) Determining audit criteria.
4) Deciding audit approach.
5) Developing audit questions.
6) Assessing audit team skills and whether outside expertise required.
7) Preparing audit design matrix.
8) Establishing time table and resources.
9) Intimation of audit programme to audit entities.
1) Verification of trans. on tests of public interest, commonly accepted customs & std of
conduct.
2) Auditor bring out cases of improper, avoidable, infructuous exp., even if exp. is as per
rules.
-Principles of propriety audit –
1) Exp. is not prima facie more than occasion demands & every official exercise same degree
of vigilance for exp. as person of ordinary prudence would for own money.
2) Authority exercise power to sanction exp. to pass order – not directly/ indirectly accruing
to own advantage.
3) Funds not utilised for benefit of particular/group of persons.
4) Apart from agreed remuneration, no other avenue kept open to indirectly benefit mgt
personnel/employees/others.
-Functions of auditor in context of propriety audit-
1)
See that all exp. properly planned.
2)
See that size & channel of exp rightful & expected to give max results.
3)
See that substitute plan of action can bring improvement on current operation.
4)
Appraise whether exp. likely to give optimum result.
5)
Examine actions & decisions of mgt to see that they are conductive to public interests &
they meet std of conduct.
-Problems in propriety audit –
1) Distinct nature.
2) Formulation of auditing proposition.
3) Subjective – difficult to establish std of public interest, commonly accepted customs, std
for conduct. Solution – Norms of property laid by C&AG.
4) Auditor’s judgement – objective. Otherwise – Propriety audit – counterproductive.
1) Intro - General review of working results of govt co., deemed govt co. & Corporations.
2) Results of comprehensive appraisal of selected undertakings conducted by Audit Board.
3) Resume of co. auditors’ report submitted by them under directions of C&AG.
4) Significant results of audit of undertakings not taken up for appraisal by Audit Board.
-For certain states, C&AG submit separate audit report (commercial) to legislature, while for
other states/UTs with legislature, there is commercial chapter in main auditor report.
1) General principles –
• Quality control
• Audit risk
• Materiality
• Documentation
• Communication
• Ethics and independence
• Audit team management and skill
• Professional judgement, due care and skepticism
IA provides independent assurance on effectiveness of internal control & risk mgt process to
enhance governance & achieve organizational objectives.
Q2) Objectives & scope of IA Function as per SA 610-’Using the work of Internal Auditor’
• listed company
• unlisted public company-
o PUSC 50cr or more in last FY,or
o turnover 200cr or more in last FY,or
o o/s loan from bank/public FI >100cr at any point of time in last FY,or
o o/s deposit 25cr or more at any point of time in last FY
• pvt. company-
o Turnover 200cr or more in last FY,or
o o/s loan from bank/public FI >100cr at any point of time in last FY
Comply within 6 months of applicability
• Individual/firm/body corporate
• CA/CMA(whether in practice or not)/Decided by Board
• May/may not employee of co.
• Part of mgt & not merely assistant
• Identify, source, engage & manage external expert & technical solution
• Define overall plan, scope & methodology of IA Function periodically
• Develop quality evaluation & improvement program
• Communicate & engage stakeholders about progress & objectives
• Monitor audit assignment, planning, execution, reporting of finding,closure of observation
Q7) Internal Auditor’s Responsibilities wrt accounting function & financial records-
Developed & documented by internal auditor, in consultation with TCWG, including AC.
Developed in way that all business processes of financial & operational activities are reviewed by
internal audit function within defined time & ensuring appropriate consideration made & balance
ensured to following-
• Risk underlying business process
• Risk appetite of organization
• Value that IA can provide to org.
• Effort involved to conduct IA for particular business process
• Coverage of all auditable areas within defined time range
• Special expertise to evaluate mgt control system,specially financial & a/cing controls
• A/cing & financial expertise
• Knowledge of commerce,law,tax,cost a/cing,economics,quantitative method,EDP system
• Provide assurance to mgt that confidentiality of info maintained
• Understanding mgt principle, technique
• Understanding a/cing software,ERP system; knowldege of IT controls
Decided by internal auditor based on judgement,in consultation with auditee.No IA report in final
form unless written draft previously shared with auditee.
Typical IA report includes-
• Audit scope
• Audit period
• Executive summary
• Summary of critical findings
• Detailed audit finding with elaboration on business impact & root cause of issues
Q16) Documentation-
• SIA 390-Monitoring & Reporting of Prior Audit Issues, CIA responsible for monitoring
closure of such issues by action plan.
• Responsibility to implement action plan is of mgt
• Internal auditor review if follow up by mgt on basis of report.If no action taken in
reasonable time-draw mgt attention.If mgt not implemented recommendations, internal
auditor ascertain reasons
• If mgt accepted recommendation, internal auditor periodically review manner & extent of
implementation & report to mgt which recommendation not implemented fully/partly
• Scope & objective of IA depends on size & structure of entity & mgt requirement.Internal
auditor-areas like review of a/cing system & IC,exam. of financial & operating info.There is
overlap b/w work of IAr &EAr
Status of
Can be employee Not employee
auditor
Users of
Top mgt & referred by EAr Stakeholders
report
IAr examine adequacy of operational controls EAr examine accuracy & validity
Examination
of org of FS
Visible trail of evidence to trace info in report back to original input source.It is chronological
record of changes(creating new,updating,deleting data) to data
Records maintained as audit trail include following info-
• when changes made i.e., date & time
• who made change i.e, user ID
• what data was changed i.e., data/transaction reference
ICs to be implemented/IT Controls-
• Controls to ensure audit trail feature not disabled
• Controls to ensure User ID given to each individual/not shared
• Controls to ensure change to configuration of audit trail authorized & log maintained
• Controls to ensure periodic backup of audit trails taken+archived
• Controls to ensure access to audit trail disabled & access log maintained
Q1) Audit vs DD
Audit DD
Independent -examination of potential investment to confirm material facts of prospective
examination of business opportunity.
FS to express -Review of financial and non-financial records.
opinion. -Take care reasonable person would before entering into trans. with other party.
Q2) Importance of DD
To confirm that To identify potential To gain useful info for asset To verify that trans.
business is what ‘deal killer’ defects in valuation, defining complies with
it appears to be. target co. & avoid bad representation, warranties & invst/acq. criteria.
business transaction. negotiating price concession
Q3) Classification of DD
Q4) Mr. A wants to sell business. B ltd. wants to buy business. You are doing DD audit to
decide whether its worthwhile to buy business. What procedures to follow before advice? Or
DD process includes some objectives for verification areas. What are they?
Brief description of history of business Accounting policies & practices Mgt info system
Background and standing of promoters Trading results of both past A&L of latest B/S
and recent past
-SCOPE OF FINANCIAL DD-
Co. may not show SCN which have not matured into demands as contingent liabilities – material &
imp.
Reviewing & reporting Assessing business Working through DD Helping prepare offer
on financials of target first hand by site Process with based on completion
co. visit. acquisitioning co. by of DD.
defining key areas.
1) Start with open mind. Don’t assume that wrong will be found. Identify trouble spots & ask
for explanation.
2) Make best team - Internal/external experts – check experience
3) To get 360° view – get help in all areas like finance, tax, law.
4) Talk to suppliers, customers, employees, business partners.
5) Take risk management approach.
6) Prepare comprehensive report – compliance and substantive risk.
INVESTIGATION
Every word/expression should be Report should not Relevant facts should be linked
properly considered so that possibility contain anything which with evidence.
of different meaning is low. is not relevant.
Investigator’s opinion should appear in Report nature, objective, scope, limitations of
final para of report assignment
Q5) What points to consider for studying economic & financial position of business?
1) Whether proper PFBD have been made in years in which relevant sales took place instead of
in the year in which they have been w/off.
2) Length of credit period allowed OR Excessive discounts allowed throughout period under
investigation.
3) Debtors should be classified as per age.
4) Determine debtors to sales ratio.
Q7) What factors you will take into a/c as investigator in assessing turnover?
1) Political & economic considerations - Are govt policies likely to promote extension of
market for goods to other countries?
2) Marketability – Is it possible to extend sales into new markets OR they have been fully
exploited?
3) Trend – Whether in past, sales have been increasing consistently OR fluctuating?
4) Competition – What is likely effect on business if other manufacturers enter same field OR
if products sell in competition are placed on market at cheaper price?
1) Has ratio of inventory to turnover been increasing & if so, is it continuing or temporary
trend?
2) Are trade payables paid promptly or backlog?
3) What will be effect on inventory, T/R, T/P if turnover is increased OR if new products are
introduced?
NW is divided by no. of shares comprising equity capital to arrive at value of 1 share. G/w & non
trading assets (like investment) based on estimated future maintainable profit is included among
assets to arrive at NW.
2nd method – Avg. profit of business of past 5 –7 years is computed.
Assuming that same will continue, value of business calculated by capitalising it at reasonable rate
of interest. If rate - high, value of business – smaller. If rate – low, value of business – high.
Provision of risk factor & restriction on t/f in value of shares made by varying rate of interest
applied.
Rate of return that investor expects to earn in business of type in which co. engaged is
ascertained from price of shares of co. engaged in similar business quoted on stock exchange.
1) Purpose of loan & manner in which borrower proposes to invest loan amt.
2) Financial standing & reputation for business integrity of directors /officers of co.
3) History of growth & development of co. & performance in past 5 years.
4) If loan application to other bank/FI was made & if yes, reason of rejection.
5) If company authorised by MoA/AoA to borrow money for purpose for which loan will be
used.
To investigate profitability of business for judging accuracy of repayment schedule furnished
by borrower, as well as value of security in form of assets of business already possessed and
those which will be created out of loan, investigating accountant shall take following steps –
1) Skillfulness of perpetrator
2) Frequency and extent of manipulation
3) Degree of collusion
4) Relative size of individual amounts manipulated
5) Seniority of individuals involved
1) Carbon copies of receipts marked ‘duplicate’ should be scrutinised to confirm that they are
copies of receipts issued earlier.
2) Cash sales vouched in detail.
3) All withdrawals from Bank checked wrt entries in bank passbook.
4) Recovery from customer checked with receipts issued to them.
5) Evidence of income from diff sources scrutinised.Eg, sales summary.
1) Suppressing cr. notes issued by suppliers & withdrawing corresponding amt. not claimed by
them.
2) Withdrawing amt unclaimed by suppliers for any reason by showing that it has been paid to
them.
3) Accepting purchase invoice at price higher than market price & collecting excess amt paid in
cash from suppliers.
4) Adjusting fictitious invoice as purchase in a/cs of suppliers & subsequently misappropriating
amt when payment made to suppliers for invoice.
Verification of balance in suppliers’ ledger/audit procedures
Employees remove goods from premises. Theft of goods – concealed by w/off as damaged goods.
Stock actually dispatched but not Inflating qty issued for production.
entered in sales a/c.
Inventory records manipulated by employees who committed theft so that book qty tally with
actual qty .
Verification for defalcation of inventory / Audit procedures
Entire system of receipt, storage, dispatch of Physical quantity in inventory & those shown by
goods reviewed to localise weakness. inventory books – reconciled
Take guidance from past records showing extent Check per hr capacity of m/c & time it took to
of wastage in production. complete 1 cycle of production.
FORENSIC ACCOUNTING
Q1) Definitions
1) Analyse, interpret, summarise & present complex financial & business issues.
2) Engaged in public practice/employed by insurance co, bank, police, govt agency.
3) Forensic accounting services –
• List down assumptions and limitations.Eg of limitation -lack of mgt support, denied access to
records.
• Report won’t give opinion/judgement on guilt/innocence.
• Reporting timelines – reasonable, interim – standard
Q7) Framework Governing Forensic Accounting & Investigation -FAI (the Framework)
-Objectives –
-FAIS provide
It addresses needs of present moment without compromising current & future generations to
meet sustainable lifestyles.
3 pillars of sustainability – Environment(E), Social (S), Governance(G) – ESG Reporting:
Environment(E) Climate policies, energy, waste, pollution, natural resources like electricity, water
Social(S) Relations with people & institutions like labour relations & value chain.
Governance(G) Internal practices to govern, make investment decisions & comply with law.
ESG reporting is about disclosure of information & can be quantitative & qualitative.
United Nations members states adopted sustainable development to provide blueprint which
mentioned Sustainable Development Goals (SDGs). Corporates contribute to SDGs due to their
capacity to provide solutions necessary to meet SDGs. Companies lead in innovation and contribute
to achievement of SDGs.
Most widely used framework in world is Global Reporting Initiative (GRI) Sustainability Reporting
Standards having 93% of world’s largest 250 corporations. It is used in over 100 countries & is
based in Amsterdam, Netherlands.
(I) UNITED STATES- In March 2022, US Securities & Exchange Commission (SEC) proposed
climate risk disclosure requirements. Reporting includes-
Envt (incl. co’s Co’s employees Social matters Respect for Anti-corruption &
impact on envt) human rights anti-bribery
(I) SEBI recommended Integrated Reporting for top 500 listed companies (voluntary)
-Reporting under BRSR is mandatory from FY 2022-23. It was voluntary in FY 2021-22. 3 Sections
1) Entities’ governing structure develop policies for offices ensuring-ethics not compromised.
2) Info wrt policies along with performance – made available to stakeholders.
3) In case of adverse effects, more care to be taken for transparent disclosures.
4) Entities in value chain – encouraged to adopt these principles.
5) Entities - proactively respond to outside entities that violate 9 principles of BRSR, Eg,
suppliers, distributors.
Principle 2 – Safe & Sustainable Goods & Service
-Entities - make sure that G&S result in better life for consumers.
1) Transparent & communicate with stakeholders about impact of operations on people &
nature.
2) Determine context of operation & identify interested parties.
3) Fairly share benefits to stakeholders.
Principle 5 – Respect & promote human rights
1) Core elements of BRSR are to have met when org. go ahead with contributions to policy
formulation & policy advocacy.
2) Trade groups & industry chambers utilised when moving ahead with policy advocacy &
formulation.
3) Role in policy advocacy in such a way that encourages fair competition & prevents human
rights abuses.
Principle 8 – Promote Inclusive Growth & equitable development
1) Identify & address impact of activities on social, cultural & economic aspects of people.
2) Track adverse impacts of activities on society & make plans to mitigate them.
3) Bring up creative products, techno. that help marginalised communities to have well-being.
4) When designing CSR activities – review local development priorities to help marginalised
groups.
5) Ensure relocation of communities doesn’t happen & in unavoidable cases, make sure fair
compensation provided.
6) Intellectual property & traditional knowledge get respect & benefits derived from
knowledge shared equitably.
Principle 9 – Provide value to consumers in a responsible manner
Imp. Facts –
1) SA 250-applicable only on audit & not on other assurance engagements. But NOCLAR
applicable on professional accountants in service & practice.
2) SA 250 – auditor’s responsibilities for law – direct effect & no direct effect. NOCLAR
takes into a/c NC that causes substantial harm resulting in serious consequences in
financial/non-financial terms.
3) SA 250 doesn’t define stakeholders. NOCLAR is related to affect of NC on investors,
creditors, employees, public.
4) NOCLAR– imminent breach of L/R – disclose matter immediately to authority to prevent
consequences. No such provision in SA 250.
Steps to be taken for responding to NOCLAR:
Member –
Dead Request received to that effect Not paid prescribed fee Disabilities
rd
Restoration of membership only in 3 case – Appl. + arrears. Effective date of restoration of
cancelled membership-
Q9) CA in practice
-Member not in practice precluded to render services of type prescribed for CA, even though he
doesn’t require special qualifications.
-Once person becomes member of Institute, he is bound by CA Act. If he appears before income
tax tribunal, he could appear only in his capacity as CA. He couldn’t set them at naught by
contending that even though he continues to be member of Institute & has been punished by
suspension from practice, he would be entitled to practice in other capacity.
-Member of Institute can have no other capacity in which he can take up such practice.
Summary – CA’s name removed from membership – During period of removal, won’t appear before
tax authorities.
Q10) Cancellation & restoration of COP
Name of COP holder COP issued on basis of Member ceased to Member not paid
removed from incorrect info/by practice. annual fee for COP
register. mistake. till 30/09.
• When COP is cancelled, holder surrender the same to Secretary.
• Appln + Fee = Restore COP with effect from date on which cancelled provided application
before expiry of year.
A/cing & bookkeeping service Rendering of outsourced Design & implementation of fin.
financial services info system.
Actuarial services Internal audit Mgt services
Investment advisory service Investment banking service Any other services
Q12) Companies not to engage in accountancy.
1) No co. can practice as CA. Co. includes LLP, which has co. as its partner.
2) If co. contravene-every Director/officer knowingly a party – fine -
CA Firm > 1 office in India – each office in separate charge Failure – professional misconduct
of member of ICAI.
• Exemption to members practicing in hill areas. 5 conditions:
1) Firm allowed to open temporary offices in city in plains for period upto 3 months in a yr.
2) Regular office not closed during this period & correspondence made there.
3) Name board in temporary office not displayed at other times.
4) Temporary office not mentioned in letterhead/visiting card as place of business.
5) Before commencement of every winter, inform Institute that it is opening temporary office
from particular date & after office closed, intimation sent to Institute by regd post.
• CA in charge : partner/whole time employee
Member actively associated with office – Name board:No bar on putting in residence of
resides in place where office situated/ attends member with designation Chartered Accountant
office for atleast 182 days in yr. but NB of member & not firm.
• Exemption: 2nd office w/o separate charge of ICAI member – 2nd office in
same premises same city 50km from municipal limits of city in which 1st office
Declare main office.
Client – Proprietor
• General Info- Name & address, PAN/Aadhar, Business description, copy of last audited FS
• Engagement Info- Type of engagement
FIRST SCHEDULE –
Cl 12: Practice
Issue of audit queries during audit. Issue of memorandum of cash verification &
physical verification/recording results in books
of clients.
Asking for information or issue of questionnaire. Issuing acknowledgements for records produced.
Letter forwarding draft observations/FS. Raising of bills and issuing acknowledgements for
money receipts.
Yes, I will definitely clear my CA Exams 63
CA SHANKAR LAKHWANI # Audit Made Easy
Initiating and stamping of vouchers & schedules Attending to routine matters in tax practice
prepared for audit. (Income tax Act)
Acknowledging and carrying on routine Office administration and routine work.
correspondence with clients.
-SPECIAL POINTS -
Authority delegated. Fact that not signed is not CA – reqd to disclose name-should disclose name.
defence. No reqt – sign in name of firm.
member
NR entitled to register as CA
Reg 53B : Allowed (Reg 53A – MBA) Members can’t form multi disciplinary
partnerships till Regulators permit.
Cl 5: Secures professional business from non employee/non partner/means not open.
CA wrote letter to officer of Army canteen giving details of experience & audit fees. Guilty – Cl 5 &
6.
Cl 6:Solicits prof work-CA PIA:Circular,Ad,Personal communication,Interview,any other means
Directly/Indirectly
Cl 7:
Recognised by CG/Council
attitude of retiring auditor wasn’t proper. If retiring auditor had valid reasons, he should refuse
to accept.
• Previous auditor not available for accepting payment – client to purchase demand draft &
duty of incoming auditor to ensure payment.
• Objective of incoming auditor – circumstances not to accept appointment.
• Previous auditor hurt – Auditor can act after waiting for reasonable time.
• Auditor resigns – written communication to BoD + ICAI with reasons. It’s obligatory for
incoming auditor to obtain communication from BoD.
• Auditor willing for reappointment but not reappointed – File with ICAI statement & sent to
mgt. It’s obligatory for incoming auditor to obtain communication from co.
• ESB can call further info.
Cl 10: Charges/offer to charge for prof. employment fees based on % of profit/contingent
upon findings or results.
Directly/indirectly
• Doesn’t restrict sharing among relatives, dependents, friends + not for job procurement/
retainership.
Broker
Customer/CA
Lawyer
Cl 2 :
doesn’t supply info called for doesn’t comply reqt asked for
SECOND SCHEDULE –
Cl 1: Discloses info acquired in prof. eng. to anyone other than client, except
firm’s name
• SAE 3400 - CA can participate in preparation of profit/financial forecast & can review
them, provided he indicates source of info, basis of forecast, assumptions in arriving at
forecast & doesn’t vouch for accuracy of forecast.
Disclosure necessary in FS
• SA 320
• Co. taken loan from EPF. Not reflected in BoA. Auditor ignored info.
• No disclosure of charge against guarantee in favour of group co.
Cl 6 : Fails to report material MST known to him in FS he is concerned in prof. capacity
Except Fees/remuneration
Guidelines
Firm
Person
• SA 240
• Firms form larger structures & share common brand name, quality control system,
resources, common ownership/control/mgt, business strategy, profit/cost.
• Professional resources = Common system, staff, dept, audit methodology, training courses.
Forms of network -
• Network constituted as mutual entity (Network won’t carry out professional practice )
• Network constituted as partnership firm (max 20 Partners)
• Network Constituted as LLP.
• Network constituted as Company (Mgt consultancy services co.)
• Network firms consist of proprietor, partnership.
• Firm is allowed to join only one network.
• Firms having common partners shall join only one network.
• “& Affiliates” after name & not “& Co./ & Associates”
o If network is mutual entity/p.s firm – AB & Affiliates
o If network is LLP – AB Affiliates LLP
o If network is ltd. Company – AB Affiliates P.Ltd / Limited
• Institute approve/reject name of network & intimate to Network within 30 days from
receipt of Form.
• Change in constitution due to entry/exit – Network communicate to Institute within 30
days from change.
Registration of network with entities in India –
• Authorised representative of Indian firm file declaration with Institute within 30 days
from entering into network.
Ethical compliance –
• If one firm = Stat auditor, associate not to accept Sec 144 services.
• Guidelines of ceiling on non audit fees –
o Firm = stat auditor: Same
o Other firms collectively: 3 times stat audit fees
• Rotation of firms – no member firm can accept.
• Follow Advertisement guidelines.
• Permitted to use words “Network Firms” on prof. stationery.
Framework of Internal Byelaws of network – Clauses on which affiliates – written agreement:
• Letter ‘CA’ (in blue) with tri colour tick mark (upside down) & white background.
• ‘India’ added in logo.
• Use logo as it is. Don’t change font, spacing, dimensions, design, colours, background.
• Refrain from rotating/tilting. Don’t shrink/distort.
• Transition time - 1 year
Chapter XVII – Guidelines for Corporate Form of Practice –
• If CA is stat auditor of entity, then management consultancy company shouldn’t accept Sec
144 services.
• Ceiling on non audit fees is applicable wrt Mgt consultancy company.
• Mgt consultancy co. comply with Cl 6 & 7 of Part I of First Schedule.
Q17) Council Guidelines for Advertisement, 2008
• No standard format
• “Pull” model. Not “Push” model.
• No info in website be circulated on their own/email except on pull request.
• No Circular/ad to solicit people to visit website.
• Permitted to mention website in professional stationery & email.
• Info that can be displayed on website –
o Member/firm name
o Year of establishment
o Address, telephone number, fax number, email ID
o Nature of services (specific pull request)
o Partners’/Employees’ details (Area of experience on pull request)
o Job vacancies for CA & articles
Yes, I will definitely clear my CA Exams 76
CA SHANKAR LAKHWANI # Audit Made Easy
o No. Of articled assistants (pull request)
o Nature of assignment (pull request). Name of client & fee can’t be given but
Permissible if reqd by regulator-only to extent of reqt. Mention on website below disclosure that
“This disclosure is in terms of reqt of regulator having jurisdiction in”
• Passport photo allowed. Framed photo not allowed.
• Articles, educational videos are permissible.
• Chat rooms for CA & b/w firms & client permitted but confidentiality ensured. Document
mgt facility to client to access docs.
• Link of page on social networking site. Member shouldn’t solicit to visit/like.
• Online advice to client on request (free/paid)
• Secrecy of client data ensured
• No ad
• Befitting CA profession
• Link to website of ICAI, its regional council, branches & govt website.
• Website address as near as possible to firm name.
• Website should mention info, not at material variance from ICAI’s records.
Online third party platforms –
Branch audit Branch audit of co. shouldn’t be conducted by stat auditors having 10
or more members but should be conducted by local CA firm having less
than 10 members. This restriction is NA –
• A/cing records of branches maintained at HO of co.
• Significant operations of co. are carried out at branch.
Joint audit Large co. – CA firm with less than 5 members
Exemption –
• total fees received by firm doesn’t exceed ₹20 lac.
1. Not permissible for practicing CA being stat auditor to prepare BRSR study to audit clients
but can provide advisory services on same. Permissible to be “assurance provider of BRSR
core” for same client.
2. Stat auditor not permitted to engage in compilation eng (SRS 4410).
3. Permissible for practicing CA – Services assessment/performance audit of centres of skill
development council of Govt of India (MCS).
4. Permissible for practicing CA to accept Mystery audit.
5. Permissible for practicing CA to mention position as promoter/director on portal of co but
can’t mention prof. attainment/name of firm – No violation of Cl 6 & 7 Part I First Sch.
6. Permissible for practicing CA to become prof. director in Board of mgt of Co-operative
bank.
7. Permissible for CA to set up practice in IFSC/GIFT city.
8. Permissible for CA to render prof. service to IFSC units from offices o/s IFSC.
9. Not permitted to publish vision/mission statement on letterhead/visiting card/stationery.
It may be printed on firm profile & provided on request.
10. Not permissible for CA being stat auditor of bank to accept ASM of customer of same
bank simultaneously. He can accept either of assignments at one time.
11. Practicing CA can’t become internal auditor & procurement officer simultaneously.
12. Permissible for practicing CA to charge fee on % of utilization amt of education institute
to certify amt (utilization) spent by institute out of grant.
13. Practicing CA can be non-executive/independent director in cooperative bank provided he
isn’t involved in daily activity of org., nor he/partner are auditor.
14. Permissible for practicing CA to become member of ‘Board of Mgt’ in primary (urban)
cooperative bank. Role similar to Director simplicitor.
15. Practicing CA can’t act as trademark/patent attorney. But prof. advice wrt intellectual
property rights (IPR) is permissible.
GUILTY
Accept Reject
Matter close
(2nd Sch/both)