Auditing & CG
Auditing & CG
Complied by:
Mr. Chiranjibi Bisoi, Lecturer in Commerce,
Prananath College (Autonomous), Khordha
Sponsored By:
BANIJYAM
(AN INSTITUTE FOR COMMERCE)
B-28, Ruchika Market, Baramunda, Bhubaneswar
Contact: 8599888110
B.COM_CORE 13_AUIDITING AND CORPORATE GOVERNANCE_UNIT 1
C. Verification of Financial Statements: Auditors verify the accuracy of financial statements by checking
supporting documents, vouchers, ledgers, and records to ensure compliance with accounting standards.
D. Ensuring Compliance with Laws and Regulations: Auditors ensure that financial statements comply with:
Techniques of Auditing
Auditors use various techniques to examine financial records and transactions to ensure accuracy, completeness, and
compliance.
1. Vouching
• The process of examining documentary evidence (e.g., invoices, receipts, bank statements) to verify the
authenticity of transactions.
• Ensures that every transaction is properly recorded and authorized.
2. Verification
• The process of checking assets and liabilities to confirm their existence, ownership, and valuation.
• Physical verification is done for tangible assets like cash, inventory, and machinery.
3. Valuation
• Ensuring that assets and liabilities are recorded at their correct values according to applicable
accounting standards.
• For example, depreciation on fixed assets should be calculated as per accounting policies.
4. Checking and Posting
• Auditors may ask questions to management, employees, and third parties to verify financial information.
• Third-party confirmations (e.g., bank confirmations, debtor confirmations) provide independent
verification.
7. Analytical Procedures
• Comparing financial data with previous years, industry averages, or expected trends to identify unusual
variations.
• Ratio analysis, trend analysis, and comparative financial statements are commonly used.
8. Test Checking and Sampling
• Ensuring that the organization complies with legal, regulatory, and internal policies.
• Example: Checking if tax returns are filed on time.
10. Substantive Testing
CLASSIFICATION OF AUDIT
Auditing can be classified based on different criteria such as purpose, conduct, scope, and nature of the
organization. The major types of audits are discussed below:
1. Classification Based on Purpose
A. Statutory Audit
• A compulsory audit required by law for certain entities like companies, banks, and cooperative
societies.
• Conducted as per the provisions of the Companies Act, 2013, Income Tax Act, 1961, or other relevant
laws.
• Example: The audit of a public limited company.
B. Private Audit (Voluntary Audit)
• Conducted voluntarily by individuals, sole proprietors, or firms to assess their financial records.
• Not required by law but helps in financial accuracy and business decision-making.
• Example: Audit of a small business or NGO.
C. Tax Audit
• Conducted to check whether an entity complies with tax laws and submits correct tax returns.
• Mandated under Section 44AB of the Income Tax Act, 1961 in India.
• Example: Businesses exceeding a certain turnover must get a tax audit done by a CA.
D. Internal Audit
• Conducted by an organization's own internal auditors to evaluate internal controls and processes.
• Helps management in risk assessment, fraud prevention, and operational efficiency.
• Example: A manufacturing company auditing its production process.
E. Government Audit
• Conducted by government-appointed auditors to ensure the proper use of public funds.
• In India, audits of government organizations are done by the Comptroller and Auditor General
(CAG).
• Example: Audit of government ministries, PSUs, or local government bodies.
F. Forensic Audit
• A specialized audit aimed at detecting fraud, embezzlement, or financial crimes.
• Used in legal proceedings and corporate investigations.
• Example: Investigating money laundering cases.
2. Classification Based on Conduct
A. Continuous Audit
• An audit conducted throughout the financial year at regular intervals.
• Suitable for large businesses with frequent transactions.
• Example: Banks and large corporations use continuous audits to maintain financial accuracy.
B. Periodic (Final) Audit
• Conducted at the end of the financial year after the accounts are finalized.
• More common in small and medium businesses.
• Example: Audit of a small retail business after year-end.
C. Interim Audit
• Conducted between two financial year-end audits to check interim financial performance.
• Helps in decision-making and dividend declaration.
• Example: A company conducting an audit at the half-yearly stage.
COMPILED BY: CHIRANJIBI BISOI, LECTURER, PRANANATH COLLEGE (AUTO.), KHORDHA
Sponsored By – BANIJYAM (AN INSTITUTE FOR COMMERCE), BHUBANESWAR. Mob-8599888110
B.COM_CORE 13_AUIDITING AND CORPORATE GOVERNANCE_UNIT 1
D. Surprise Audit
• Conducted without prior notice to detect fraud or mismanagement.
• Useful in cash-intensive businesses like retail or banks.
• Example: Surprise cash audit in a retail store.
3. Classification Based on Scope
A. Financial Audit
• Focuses on verifying financial statements, books of accounts, and transactions to ensure accuracy and
compliance.
• Example: Audit of a company’s balance sheet and income statement.
B. Operational Audit
• Evaluates the efficiency and effectiveness of operational processes.
• Helps in improving productivity and reducing costs.
• Example: Audit of the supply chain process in a manufacturing firm.
C. Compliance Audit
• Ensures that an organization follows legal, regulatory, and internal policies.
• Example: Audit to check compliance with labor laws.
D. Performance Audit
• Assesses whether resources are used efficiently and objectives are met.
• Common in government and non-profit organizations.
• Example: Audit of a public welfare scheme to check its effectiveness.
E. Social Audit
• Examines an organization’s impact on society and environment.
• Example: Audit of a company’s Corporate Social Responsibility (CSR) activities.
4. Classification Based on the Nature of the Organization
A. Proprietorship Audit
• Conducted for a sole proprietorship business to ensure accurate financial records.
• Usually voluntary.
B. Partnership Audit
• Conducted for partnership firms based on the partnership deed and mutual agreement.
• Example: Audit of a law firm operating as a partnership.
C. Company Audit
• Mandatory for all registered companies under the Companies Act, 2013 in India.
• Conducted by a Chartered Accountant.
D. Trust Audit
• Conducted for non-profit organizations, charitable trusts, and religious institutions.
• Ensures proper utilization of funds.
E. Bank Audit
• Conducted for banks to ensure compliance with RBI guidelines and banking laws.
• Example: Audit of loans and advances in a commercial bank.
Conclusion: The classification of audits depends on the purpose, conduct, scope, and the nature of the
organization. Each type of audit serves a different role, from financial verification to fraud detection and operational
efficiency. Understanding these classifications helps organizations choose the right audit process to ensure accuracy,
transparency, and compliance.
AUDIT PLANNING, AUDIT PROGRAMME, AUDIT NOTEBOOK AND AUDIT WORKING PAPERS
1. Audit Planning
Meaning: Audit planning is the systematic process of determining the audit strategy, objectives, scope, and
procedures before the audit begins. It helps auditors perform an efficient, effective, and structured audit.
Objectives of Audit Planning
• To ensure that all audit activities are conducted smoothly.
• To allocate time and resources efficiently.
• To identify risk areas and potential fraud.
• To ensure compliance with legal and professional standards.
Steps in Audit Planning
1. Understanding the Client's Business – Analyzing the industry, financial statements, and key risks.
2. Assessing Internal Control System – Evaluating internal checks and control mechanisms.
3. Determining Audit Scope and Objectives – Defining areas to be audited and key focus points.
4. Developing an Audit Strategy – Deciding on audit techniques and sampling methods.
5. Allocating Work to Audit Team – Assigning responsibilities based on expertise.
6. Deciding the Audit Schedule – Setting timelines for completion.
7. Obtaining Client Approval – Finalizing the audit plan before execution.
Benefits of Audit Planning
• Ensures a systematic approach to auditing.
• Minimizes audit risk and errors.
• Helps in timely completion of the audit.
• Ensures compliance with accounting and auditing standards.
2. Audit Programme
Meaning: An audit programme is a detailed checklist or plan that outlines the procedures, techniques, and steps
to be followed in an audit. It serves as a guideline for auditors to ensure consistency and completeness.
Types of Audit Programme
1. Fixed Audit Programme – Predefined and standard procedures applied to every audit.
2. Flexible Audit Programme – Modified as per client-specific requirements.
Contents of an Audit Programme
• Audit objectives (e.g., verifying cash, inventory, liabilities).
• List of tasks to be performed.
• Audit techniques (e.g., vouching, verification).
• Responsibility assignment to audit team members.
• Timeline and deadlines for each task.
Advantages of an Audit Programme
• Ensures uniformity and consistency in auditing.
• Serves as a guideline for auditors.
• Helps in better coordination and supervision.
• Acts as evidence of work done.
Disadvantages of an Audit Programme
• May become rigid and lack flexibility.
• Over-reliance on the checklist can reduce analytical thinking.
• Not suitable for all businesses, especially those with unique operations.
COMPILED BY: CHIRANJIBI BISOI, LECTURER, PRANANATH COLLEGE (AUTO.), KHORDHA
Sponsored By – BANIJYAM (AN INSTITUTE FOR COMMERCE), BHUBANESWAR. Mob-8599888110
B.COM_CORE 13_AUIDITING AND CORPORATE GOVERNANCE_UNIT 1
3. Audit Notebook
Meaning: An audit notebook is a record maintained by auditors to document key observations, queries, and
issues found during the audit. It acts as a reference for future audits and helps in resolving disputes.
Contents of an Audit Notebook
1. Audit Plan and Programme – Steps to be followed in the audit.
2. Observations and Findings – Errors, fraud, and discrepancies detected.
3. Clarifications from Management – Responses to audit queries.
4. Pending Issues – Unresolved matters needing further verification.
5. Weaknesses in Internal Control – Areas requiring improvement.
Purpose of an Audit Notebook
• Provides evidence of audit work performed.
• Helps in resolving disputes.
• Assists in preparing the final audit report.
• Useful for future audits and references.
Conclusion
Audit planning, audit programmes, audit notebooks, and audit working papers are critical elements of the audit
process. They ensure that the audit is well-organized, systematic, and based on reliable evidence. Proper
documentation helps auditors provide an accurate and fair opinion on financial statements, ensuring transparency
and compliance with accounting and auditing standards.
1. Internal Control
Meaning: Internal control refers to the systematic measures, policies, and procedures implemented by an
organization to ensure accuracy, efficiency, compliance, and security in financial and operational activities. It
helps in preventing fraud, detecting errors, and ensuring smooth business operations.
Objectives of Internal Control
• To safeguard assets from theft, fraud, and misuse.
• To ensure accuracy and reliability of financial records.
• To improve operational efficiency through process automation and monitoring.
• To ensure compliance with laws, regulations, and corporate policies.
• To prevent fraud and detect errors before they impact financial statements.
Elements of Internal Control
1. Control Environment – Management’s attitude, ethical values, and organizational culture.
2. Risk Assessment – Identifying and addressing financial and operational risks.
3. Control Activities – Policies and procedures to ensure compliance (e.g., approvals, authorizations).
4. Information & Communication – Effective reporting and communication within the organization.
5. Monitoring & Review – Ongoing assessment of internal controls through audits and reports.
Types of Internal Control
1. Preventive Controls – Designed to prevent errors and fraud (e.g., authorization procedures, access
controls).
2. Detective Controls – Identify problems after they occur (e.g., reconciliations, internal audits).
3. Corrective Controls – Address and fix detected problems (e.g., error rectification procedures).
2. Internal Check
Meaning: Internal check is a part of internal control where work is divided systematically among employees in
such a way that the work done by one person is automatically checked by another. It prevents fraud and errors by
ensuring that no individual has complete control over a transaction.
Objectives of Internal Check
• To minimize errors and fraud through division of work.
• To ensure continuous checking without additional supervision.
• To promote accuracy and efficiency in financial records.
• To reduce the need for detailed external audits.
Features of Internal Check
• Work is allocated systematically to prevent fraud.
• No single person handles a transaction from start to finish.
• Routine checking is embedded in operations.
• Responsibility is shared among multiple employees.
Examples of Internal Check
• Cash Handling: The person receiving cash should not be the one recording it.
• Purchasing Process: Ordering, receiving, and payment approval should be done by different employees.
• Stock Management: The person recording stock should not be the one issuing it.
2. Vouching
Meaning: Vouching is the process of checking and verifying documentary evidence (vouchers, invoices, receipts,
etc.) to ensure that transactions recorded in the books of accounts are genuine, authorized, and correctly classified.
It is the foundation of auditing.
Objectives of Vouching
4. Verification of Assets
Types of Assets & Their Verification
5. Verification of Liabilities
Types of Liabilities & Their Verification
Conclusion: Vouching and verification are crucial steps in the audit process. Vouching ensures that transactions
are recorded accurately, while verification confirms the existence, ownership, and valuation of assets and
liabilities. Together, these processes help in detecting fraud, ensuring transparency, and maintaining financial
accuracy in an organization.
• Companies Act, 2013 (India): Specifies audit requirements for limited companies.
• International Standards on Auditing (ISA): Used for global auditing practices.
• IFRS and Indian GAAP: Ensures compliance with relevant accounting standards.
2. Types of Audits
• Statutory Audit: Mandatory for all companies to ensure compliance with financial regulations.
• Internal Audit: Conducted to review internal controls and risk management processes.
• Tax Audit: Ensures proper tax compliance under the Income Tax Act.
• Forensic Audit: Investigates fraud, financial irregularities, or misconduct.
• Cost Audit: Evaluates cost records in industries where cost audits are prescribed.
3. Appointment of Auditors
• The auditor must be a Chartered Accountant (CA) and a member of the Institute of Chartered
Accountants of India (ICAI) (or equivalent body in other countries).
• A firm can be appointed as an auditor if the majority of its partners practicing in India are qualified CAs.
b) Certification Requirement
• For listed companies and large public companies, the auditor may need additional certifications and
experience in auditing large corporations.
• If the vacancy arises due to resignation, the Board appoints an auditor within 30 days, subject to
shareholder approval within 3 months.
• If the vacancy arises due to reasons other than resignation, the Board can fill the vacancy without
shareholder approval.
2. Rotation of Auditors
As per Section 139(2) of the Companies Act, 2013
• Mandatory rotation applies to listed and certain large public companies.
• For an individual auditor: Maximum term of 5 years.
• For an audit firm: Maximum of two consecutive terms of 5 years (total 10 years).
• After completing the tenure, the auditor cannot be reappointed for 5 years.
3. Removal of Auditor
As per Section 140 of the Companies Act, 2013
• Before Term Expiry:
o Requires approval by Board of Directors and special resolution by shareholders in a General
Meeting.
o Approval of the Central Government is needed.
o The auditor must be given an opportunity to be heard.
• After Term Expiry:
o No special approval is required.
• Removal by Tribunal:
o The National Company Law Tribunal (NCLT) can remove an auditor if they are found guilty of
fraud, misconduct, or professional negligence.
• Resignation by Auditor:
o The auditor must file a statement of reasons for resignation with the company and the Registrar
of Companies (ROC) within 30 days.
4. Remuneration of Auditor
As per Section 142 of the Companies Act, 2013
• Fixed by Shareholders at the AGM.
• In the case of the first auditor, remuneration is fixed by the Board of Directors.
• Includes audit fees, reimbursement of expenses, and additional service charges (if applicable).
5. Rights of an Auditor
Auditors are granted several rights under the Companies Act to ensure independence and effective auditing:
1. Right to Access Books & Records: Can examine all books of accounts, vouchers, financial statements,
and records.
2. Right to Seek Information: Can ask for explanations from the company’s directors and employees.
3. Right to Visit Branches: Can visit any branch office and conduct an audit and Can rely on reports from
branch auditors.
4. Right to Receive Notices & Attend Meetings: Entitled to receive notices of shareholder meetings. Can
attend and express opinions at AGMs and EGMs.
5. Right to Report to Shareholders: Presents the audit report to shareholders at the AGM.
6. Right to Report Fraud: If fraud exceeding ₹1 crore is detected, the auditor must report it to the Central
Government. If fraud is below ₹1 crore, it must be reported to the Audit Committee/Board of Directors.
6. Duties of an Auditor
An auditor has several key duties under Sections 143 & 144 of the Companies Act, 2013:
A) Primary Duties
1. Ensure True & Fair View of Financial Statements: Verify the accuracy of financial records and ensure
fair presentation.
2. Check Compliance with Accounting Standards: Ensure financial statements comply with Indian
Accounting Standards (Ind AS), IFRS, and GAAP.
3. Examine Internal Controls: Assess the effectiveness of the company’s internal financial controls.
4. Detect and Prevent Fraud: If fraud is found, report it to the Board or Central Government as per legal
requirements.
5. Prepare the Audit Report: Provide an opinion on financial statements, stating whether they are free from
material misstatements.
6. Certify Statutory Compliance: Ensure compliance with Companies Act, Tax Laws, and SEBI
regulations (for listed companies).
B) Restrictions on Services
As per Section 144 of the Companies Act, 2013, an auditor cannot provide the following non-audit services to the
company:
6. Responsibilities of Management & Those Charged with Governance: Explains the management's
responsibility for preparing financial statements. Highlights the role of Board of Directors and Audit
Committee.
7. Auditor’s Responsibilities: Describes the auditor’s duty to examine financial statements using auditing
standards.
8. Other Reporting Responsibilities: Includes additional legal or regulatory requirements (e.g., reporting
fraud to the government).
9. Signature & Date: Signed by the auditor, along with their name, designation, and registration number.
Includes the date and place of the audit report issuance.
2. Types of Auditor’s Reports: The auditor’s opinion depends on the company’s financial transparency and
compliance. There are four types of audit reports:
1. Unqualified (Clean) Report
• Issued when the financial statements are free from material misstatements and comply with all
regulations.
• Indicates that the company's financial statements present a true and fair view.
• Preferred by companies as it enhances their credibility.
Example Statement: "In our opinion, the financial statements give a true and fair view of the financial position of
the company in accordance with Indian Accounting Standards (Ind AS) and Companies Act, 2013."
2. Qualified Report
• Issued when financial statements are generally fair, but there are minor misstatements or deviations
from accounting standards.
• The misstatements are not severe enough to affect the overall financial picture.
Example Statement: "Except for the effects of the matter described in the Basis for Qualified Opinion section, the
financial statements present a true and fair view."
Common Reasons: Non-compliance with an accounting standard; Minor discrepancies in disclosures or valuations.
3. Adverse Report
• Issued when the financial statements contain major misstatements that mislead stakeholders.
• Suggests that the company’s financial records do not reflect reality.
Example Statement: "The financial statements do not give a true and fair view of the company's financial position
as per accounting standards."
Common Reasons: Fraudulent financial reporting; Major violation of accounting principles.
4. Disclaimer of Opinion
• Issued when the auditor is unable to express an opinion due to lack of sufficient audit evidence.
• Indicates serious concerns about the company’s financial transparency.
Example Statement: "Due to the lack of sufficient audit evidence, we are unable to express an opinion on the
financial statements."
Common Reasons: Lack of cooperation from management; Loss or destruction of key financial records; Legal
restrictions preventing full audit access.
Conclusion: The Auditor’s Report is crucial for stakeholders to assess a company’s financial health,
transparency, and compliance. A clean report is a positive sign, while qualified, adverse, or disclaimer reports
indicate risks or potential financial mismanagement.
• Key Sections: ✔Section 147(2): If an auditor is found guilty of non-compliance with auditing standards or
negligence, they are liable to pay damages to the company, shareholders, or creditors. ✔Section 245: Allows
shareholders to file a class action suit against auditors if their actions have caused losses to investors.
• Possible Consequences: ✔ Compensation to affected parties. ✔ Disqualification from future audits.
B. Criminal Liabilities: If an auditor is involved in fraud, false reporting, or deliberate misstatements, they can
face criminal prosecution under the Companies Act, 2013.
• Key Sections: ✔Section 143(12): If an auditor detects fraud worth ₹1 crore or more, they must report it
to the Central Government. Failure to do so can result in imprisonment (up to 3 years) and a fine (₹1
lakh – ₹25 lakh). ✔Section 147(4): If an auditor is involved in fraud, they can be imprisoned for up to
10 years and fined up to three times the amount of fraud. ✔Section 147(5): If an audit firm is involved,
all partners can be held liable.
• Possible Consequences: ✔ Heavy fines and penalties. ✔ Imprisonment for serious offenses. ✔ Blacklisting
of audit firms.
C. Professional Liabilities (Disciplinary Actions): The Institute of Chartered Accountants of India (ICAI) has
a Code of Ethics that auditors must follow. If they violate professional ethics, they can face disciplinary action.
• Key Sections: ICAI Code of Conduct: Auditors must follow professional standards. ✔Section 132: The
National Financial Reporting Authority (NFRA) can investigate auditors and take disciplinary actions.
✔Section 140(5): The Tribunal (NCLT) can remove an auditor for misconduct.
• Possible Consequences: ✔ Suspension of audit license. ✔ Ban from auditing for a specific period.
✔ Cancellation of ICAI membership.
• The Satyam scandal was one of India's biggest accounting frauds, where auditors from PwC were
accused of failing to detect financial fraud.
• The auditors were banned, fined, and faced legal action under Indian corporate laws.
3. How Can Auditors Protect Themselves?
Follow auditing standards (SA, Ind AS, IFRS, GAAP) strictly.
Conduct independent and unbiased audits.
Report frauds immediately as per Section 143(12).
Maintain proper documentation of audit procedures.
Avoid conflicts of interest and ensure ethical conduct.
Conclusion: The Companies Act, 2013 has significantly strengthened auditor liability to prevent fraud, negligence,
and corporate mismanagement. Auditors must exercise due diligence, adhere to ethical standards, and report
frauds to avoid severe penalties.
• Objective: To verify whether the cost accounts are maintained correctly and comply with cost accounting
standards.
• Applicable to: Manufacturing companies, industries with high production costs.
• Relevant Law: Section 148 of Companies Act, 2013 mandates cost audits for specific industries (e.g.,
cement, pharma, telecom).
B) Management Audit
• Objective: To ensure compliance with corporate laws, SEBI regulations, and CG norms.
• Applicable to: Listed companies and large corporations (as per Section 204 of Companies Act, 2013).
• Conducted by: Company Secretaries (CS).
• Focus Areas: Board meetings, shareholders' rights, statutory records.
F) Social Audit
• Objective: To assess the impact of corporate activities on society, environment, and stakeholders.
• Applicable to: Government projects, NGOs, and large corporations with CSR activities.
• Benefits: Ensures sustainable business practices and ethical operations.
G) Environmental Audit
• Objective: To verify financial, legal, and operational aspects before mergers, acquisitions, or investments.
• Conducted by: Investors, financial advisors, and auditors.
• Focus Areas: Financial health, liabilities, risk factors, legal compliance.
• Example: Before acquiring a company, investors conduct due diligence to check financial stability.
I) Operational Audit
• Definition: A cost audit examines whether cost records are maintained correctly and in compliance with
cost accounting standards (CAS).
• Applicable Law: Section 148 of Companies Act, 2013 mandates cost audits for specific industries (e.g.,
cement, pharma, telecom, power).
• Conducted by: A Cost Accountant (CMA).
Special Features of Cost Audit
• Industry-Specific Requirement – Mandatory for certain industries with high production costs.
• Verification of Cost Records – Ensures accurate cost allocation in manufacturing & service sectors.
• Efficiency & Waste Reduction – Helps identify unnecessary costs and improve cost control.
• Compliance with Cost Accounting Standards (CAS) – Ensures standard costing methods are followed.
• Pricing & Decision Making – Assists management in pricing strategies and budgeting.
• Government Regulation – Used by regulatory authorities to monitor pricing and fair competition.
• Fraud Detection – Helps in identifying cost manipulation and fraudulent cost inflation.
2. Tax Audit
• Definition: A tax audit is an examination of a business's tax records to ensure compliance with tax laws
and prevent tax evasion.
• Applicable Law: Section 44AB of Income Tax Act, 1961 mandates tax audits for businesses with:
o Turnover exceeding ₹1 crore (for businesses). Gross receipts exceeding ₹50 lakhs (for
professionals).
• Conducted by: A Chartered Accountant (CA).
Special Features of Tax Audit
• Definition: A management audit evaluates the efficiency, effectiveness, and decision-making process of
the management.
• Not Mandatory: a voluntary audit conducted by companies to improve overall management performance.
• Conducted by: Internal or external auditors specializing in business management.
Special Features of Management Audit
Conclusion: The future of auditing is technology-driven, focusing on automation, AI, blockchain, and real-time
data analysis. These trends help auditors provide more accurate, efficient, and fraud-resistant audits.
BASIC CONSIDERATIONS OF AUDIT IN AN EDP ENVIRONMENT
With the increasing use of computers and digital systems in financial and business operations, auditing in an EDP
(Electronic Data Processing) environment has become essential. Unlike traditional manual audits, EDP audits
require auditors to assess IT controls, data security, system reliability, and automated processes.
1. Understanding the EDP System
Auditors must understand the organization's IT infrastructure, accounting software, databases, and
digital records.
Identify automated vs. manual processes to determine audit risks.
Example: Auditing SAP, Oracle, Tally, or QuickBooks used in financial reporting.
2. Internal Controls in an EDP System
Evaluate General Controls – Security policies, data access controls, and software updates.
Assess Application Controls – Input validation, processing accuracy, and output integrity.
Example: Ensuring restricted access to financial data to prevent fraud.
3. Audit Trail in EDP Systems
Digital transactions leave an audit trail, which auditors must review for inconsistencies.
Verify whether logs and reports are tamper-proof.
Example: Checking log files of online banking transactions.
4. Data Security & Cybersecurity Risks
Auditors should assess firewalls, encryption, and antivirus protection.
Verify compliance with ISO 27001, GDPR, and IT Act, 2000 for data security.
Example: Auditing cloud storage security in financial firms.
5. Risk of Data Manipulation & Fraud
Ensure no unauthorized changes are made to records.
Identify red flags like unusual transactions, duplicate entries, or unapproved access.
Example: Preventing alteration of supplier invoices in an ERP system.
6. Continuous & Automated Auditing Tools
Use Computer-Assisted Audit Techniques (CAATs) to analyze large volumes of data.
Perform real-time audits with AI-based audit tools.
Example: Using ACL Analytics, IDEA, or Power BI to detect anomalies.
7. Backup & Disaster Recovery Measures
Check if proper data backup policies exist to prevent data loss.
Verify availability of disaster recovery plans in case of system failures.
Example: Ensuring banks have backup systems for online transactions.
8. Compliance with IT Regulations
Ensure the organization follows legal and regulatory frameworks for IT systems.
Example: RBI guidelines on IT security for financial institutions.
Conclusion: Auditing in an EDP environment requires IT knowledge, cybersecurity awareness, and data
analysis skills. Auditors must ensure system security, accuracy, and reliability of financial data in a digital
setup.
• Importance: SAs promote consistency and credibility in the global marketplace by making audits conducted
in accordance with globally recognized standards more readily identifiable. [1]
Some case studies and practical problems related to auditing and Standards on Auditing (SAs):
Case Study 1: Failure to Detect Fraud (SA 240 – Fraud in Audit)
Scenario: ABC Ltd. appointed an auditor to review its financial statements. The auditor relied only on management
representations and did not verify supporting documents. Later, it was discovered that the company’s sales figures
were inflated to show higher profits.
Issues Identified:
The auditor did not apply professional skepticism (as required under SA 200).
Lack of proper risk assessment procedures (as per SA 315).
Non-compliance with SA 500 (Audit Evidence), as no external confirmation was obtained.
Key Learnings:
Case Study 2: Auditor’s Liability in Negligence (SA 250 – Compliance with Laws and Regulations)
Scenario: XYZ Ltd. faced a legal penalty for non-compliance with environmental laws. The auditors had not
reported this issue in their audit report. The company later argued that the auditors failed in their duties.
Issues Identified:
Non-compliance with SA 250, which requires auditors to consider legal & regulatory frameworks.
Failure to include an Emphasis of Matter (EOM) paragraph in the audit report (as per SA 706).
The auditor may face penal actions under the Companies Act, 2013.
Key Learnings:
Case Study 3: Auditor’s Opinion Modification (SA 705 – Modified Audit Opinion)
Scenario: A company’s inventory records were incomplete, and the auditor could not verify stock valuation. The
auditor had to decide whether to issue a Qualified Opinion or an Adverse Opinion.
Key Considerations:
Key Learnings:
The auditor failed to perform Going Concern Evaluation (as per SA 570).
There was no mention of material uncertainty in the audit report.
The auditor did not consult with management on future plans.
Key Learnings:
Conclusion
These case studies highlight common audit failures, SA compliance issues, and auditor responsibilities. Auditors
must follow ethical practices, apply professional skepticism, and adhere to SAs to avoid legal and financial risks.
Conclusion
Corporate governance codes and standards play a vital role in ensuring ethical business conduct, transparency,
and investor protection. Strengthening corporate governance frameworks worldwide helps prevent fraud, enhances
financial stability, and builds long-term stakeholder trust.
• Establishing a foundation dedicated to social causes (e.g., Tata Trusts, Infosys Foundation).
• Long-term funding for healthcare, education, and rural development.
e) Cause-Related Marketing (CRM)
• Partnering with social causes where a percentage of sales goes to charity (e.g., TOMS’ One for One shoe
program).
• Running campaigns to raise awareness and funds for social issues.
2. Benefits of Corporate Philanthropy
For Businesses:
For Society:
• Supports Underserved Communities – Improves access to education, healthcare, and basic needs.
• Promotes Economic Growth – Investments in skill development and entrepreneurship help communities
prosper.
• Addresses Social Issues – Contributes to sustainability, equality, and social justice.
3. Corporate Philanthropy vs. CSR
While corporate philanthropy is a part of CSR, it focuses primarily on charitable giving, whereas CSR is broader,
covering sustainability, ethics, and responsible business practices.
• Tata Group – Tata Trusts funds healthcare, education, and rural development.
• Infosys Foundation – Supports literacy, public health, and disaster relief.
• Google.org – Funds global education, technology for social good, and climate change solutions.
• Microsoft Philanthropies – Provides free software, digital skills training, and humanitarian aid.
Conclusion
Corporate philanthropy is a vital way for businesses to contribute to societal well-being. While it enhances a
company’s reputation, it also plays a crucial role in addressing global challenges and fostering sustainable
development.
CSR VS. CR, CSR VS. CORPORATE SUSTAINABILITY, CSR VS. BUSINESS ETHICS, CSR VS.
CORPORATE GOVERNANCE
Corporate Social Responsibility (CSR) is often compared with Corporate Responsibility (CR), Corporate
Sustainability, Business Ethics, and Corporate Governance. While they are interconnected, each has a distinct
meaning and focus.
• CSR (Corporate Social Responsibility) refers to a company’s voluntary initiatives to contribute to society,
the environment, and ethical business practices.
• CR (Corporate Responsibility) is a broader term that includes CSR but also focuses on corporate
governance, ethics, and financial responsibility.
Aspect CSR CR
Social, environmental, and ethical Includes CSR, governance, risk management, and
Scope
initiatives. compliance.
Key Difference: CSR is a subset of CR, focusing on social and environmental aspects, while CR covers all
aspects of corporate responsibility, including governance and ethics.
• CSR is about businesses giving back to society through philanthropy and ethical operations.
• Corporate Sustainability focuses on long-term business growth while considering environmental, social,
and economic factors.
A company planting trees as a CSR A company using 100% renewable energy to ensure
Example
initiative. sustainability.
Key Difference: CSR is about responsibility and giving back, while corporate sustainability is about
embedding sustainability in business models for long-term growth.
Definition Voluntary actions benefiting society. Moral principles guiding corporate behavior.
Key Difference: CSR focuses on external social responsibility, while business ethics focuses on internal
corporate behavior and moral conduct.
Voluntary efforts to improve social and Systems, policies, and procedures that guide
Definition
environmental well-being. corporate leadership and accountability.
A company running rural education A company having an independent board for ethical
Example
programs. decision-making.
Key Difference: CSR focuses on a company’s external impact on society, while corporate governance ensures
internal accountability and leadership integrity.
Conclusion
• CSR vs. CR – CSR is a part of CR, which includes governance, ethics, and risk management
• CSR vs. Corporate Sustainability – CSR is about responsibility; sustainability is about long-term business
strategy.
• CSR vs. Business Ethics – CSR is about external social impact; business ethics is about internal corporate
behavior.
• CSR vs. Corporate Governance – CSR focuses on societal contributions; corporate governance ensures
leadership accountability.
• Regulatory Compliance – Helps businesses meet environmental laws and sustainability regulations.
• Cost Savings – Energy-efficient processes and waste reduction lower operational costs.
• Brand Reputation – Consumers prefer eco-friendly brands.
• Risk Mitigation – Reduces legal and reputational risks associated with environmental damage.
• Long-term Business Sustainability – Ensures resources are available for future operations.
3. Examples of Companies Practicing Environmental CSR
• Tesla – Focuses on clean energy with electric vehicles and solar power solutions.
• IKEA – Uses sustainable materials and aims for 100% renewable energy.
• Unilever – Committed to reducing plastic waste and carbon emissions.
• Google – Runs carbon-neutral data centers and invests in renewable energy projects.
Conclusion
The environmental aspect of CSR ensures that businesses operate responsibly, protecting the planet while
maintaining profitability. By adopting sustainable practices, companies not only comply with regulations but also
contribute to global environmental well-being.
• If a company fails to spend the required amount, it must provide reasons in its Board Report.
• Unspent CSR funds (except for ongoing projects) must be transferred to a government-specified fund
within 6 months.
• If a company fails to spend the required CSR amount, it may face fines:
o Company Fine: ₹50,000 to ₹25 lakh
o Officer-in-Default Fine: Up to ₹2 lakh
Conclusion
The Companies Act, 2013 made CSR a legal obligation for large businesses, ensuring they contribute to India’s
social and environmental development. Companies must carefully plan their CSR initiatives to comply with
regulations while maximizing positive impact.
• Public & Private Companies – Minimum three directors, with at least one independent director (if
applicable).
• Private Companies (without independent directors) – At least two directors.
• Foreign Companies – At least two persons, including one resident in India.
Formulating the CSR Policy – Identifying focus areas (education, healthcare, environment, etc.).
Recommending CSR Projects & Budgets – Approving funds and project execution plans.
Monitoring CSR Activities – Ensuring compliance and measuring impact.
Ensuring Compliance with Legal Provisions – Adhering to the Companies Act, 2013 and amendments.
Reporting CSR Activities – Submitting annual CSR reports in the company’s Board Report.
• The company's CSR spending requirement is less than ₹50 lakh annually.
• In such cases, the Board of Directors takes over the CSR responsibilities.
Conclusion
The CSR Committee ensures that companies fulfill their social responsibilities effectively, aligning business goals
with sustainable development. A well-functioning CSR Committee leads to impactful corporate philanthropy and
long-term benefits for both the company and society.
Would you like a sample CSR Committee report or a CSR policy framework for better understanding?