Skip to content

Practice

Internal audit

Internal audit of companies required under section 138 of the Companies Act, and of other entities that want a structured look at their controls, inventory, purchases and cash.

Internal audit is an independent, objective assurance activity designed to evaluate and improve the effectiveness of risk management, control and governance. For companies that meet the tests in section 138, it is a legal duty. For others — a growing mill, a hotel group, a multi-location trader — it is a way of seeing whether the controls the proprietor believes exist are actually operating at the gate, the godown and the cash counter.

Where it is most useful in this region

  • Manufacturing in GIDA, Gorakhpur: purchase-to-pay, bill of materials versus actual consumption, scrap, weighbridge, and contractor labour.
  • Agro-processing in Basti: paddy and cane receipts, moisture and quality deductions, bag-weight, and seasonal cash.
  • Hospitality and construction in Ayodhya: room revenue versus PMS, capex versus repairs, contractor running-account bills, and cash at outlets.

A longer note is in Internal audit for manufacturing units.

Form of the report

Reports are written for the Board (or the proprietor), with observations, risk, root cause and a management response column. They are not filed with ROC, but the statutory auditor is entitled to review the internal-audit findings under SA 610, and CARO asks whether an internal-audit system commensurate with the size of the company exists.

Frequently asked

Which companies must appoint an internal auditor?
Section 138, read with Rule 13 of the Companies (Accounts) Rules, 2014, requires internal audit for prescribed classes of listed and unlisted companies based on turnover, paid-up capital, outstanding loans and deposits. Private companies that cross the thresholds often discover the duty at the time of statutory audit.
Can the statutory auditor also be the internal auditor?
No. The statutory auditor of a company cannot be its internal auditor. The two roles are incompatible under the Act and the Code of Ethics.
Scroll to Top