Which companies must have an internal audit?

Section 138 read with Rule 13 requires internal audit for every listed company and for unlisted public and private companies that cross prescribed thresholds of paid-up capital, turnover, outstanding loans or deposits. The figures have been amended; the current rule should be read before a Board decides it is exempt. The statutory auditor of the company cannot be its internal auditor. See internal audit and internal audit for manufacturing units.