Internal Audit — Maduravoyal-Vanagaram Road & Maduravoyal

Section 138 requires prescribed classes of companies to appoint an internal auditor to conduct a periodic internal audit of the functions and activities of the company. The internal auditor may be a chartered accountant, a cost accountant, or such other professional as the Board decides, and may be an individual, a partnership firm or a body corporate. The auditor need not be an employee of the company. The Central Government prescribes the manner and intervals of the audit through rules made under sub-section (2). This is the operative provision that distinguishes internal audit from the statutory audit under Section 143 and the tax audit under Section 44AB of the Income-tax Act 1961.

Rule 13 sets out which companies must appoint an internal auditor. Every listed company is covered. An unlisted public company is covered if it had paid-up share capital of fifty crore rupees or more, or turnover of two hundred crore rupees or more, or outstanding loans or borrowings from banks or public financial institutions of one hundred crore rupees or more, or outstanding deposits of twenty-five crore rupees or more, during the preceding financial year. A private company is covered if turnover was two hundred crore rupees or more, or outstanding loans or borrowings from banks or public financial institutions were one hundred crore rupees or more. Under sub-rule (2) the Board, in consultation with the internal auditor and the audit committee, formulates the scope, functioning, periodicity and methodology.

The Institute of Chartered Accountants of India has issued the Framework Governing Internal Audits together with a series of Standards on Internal Audit (SIA) that guide the planning, evidence gathering, documentation, supervision and reporting of an internal audit assignment. These standards promote a risk-based internal audit approach, define the nature of assurance provided, and address internal controls, fraud consideration and communication with those charged with governance. While the SIAs are recommendatory for members, they represent the accepted professional benchmark and are frequently referenced when the Board or audit committee assesses the quality and independence of the internal audit function.

Section 450 is the residuary penalty provision. Where a company or officer contravenes a provision of the Act, or a rule made under it, for which no specific penalty is separately provided, the company and every officer in default are liable to a penalty of ten thousand rupees, and in the case of a continuing contravention a further penalty of one thousand rupees for each day the contravention continues, subject to a maximum of two lakh rupees for a company and fifty thousand rupees for an officer. Because Section 138 and Rule 13 do not carry a bespoke penalty, failure to appoint an internal auditor when required is enforced through Section 450.

The Companies (Auditor's Report) Order 2020 requires the statutory auditor to state whether the company has an internal audit system commensurate with the size and nature of its business, and whether the reports of the internal auditors for the period under audit were considered by the statutory auditor. An adverse or qualified comment here signals to lenders, investors and regulators that internal controls are weak. This clause is a practical driver for maintaining a documented, functioning internal audit even where the strict Rule 13 thresholds are borderline, because the statutory auditor must form and disclose a view.

Section 177 governs the Audit Committee, which prescribed companies must constitute. The committee's terms of reference expressly include evaluation of internal financial controls and risk management systems and reviewing the adequacy of the internal audit function, including the structure of the internal audit department, staffing and seniority of the official heading it, reporting structure, coverage and frequency of internal audit. The committee also discusses with internal auditors any significant findings and follow-up. Where no audit committee exists, the Board discharges this oversight. This is why the internal audit report is directed to the audit committee or Board rather than filed with the Registrar.

What is Internal Audit and when is it required

Service overview

Internal Audit in Chennai () is delivered by qualified Chartered Accountants under Section 138 of the Companies Act 2013 read with Rule 13 of the Companies (Accounts) Rules 2014. We build the risk universe, score inherent and residual risk, present the heat map to your Audit Committee and design quarterly audit cycles around your highest-residual-risk processes — fully aligned with ICAI Standards on Internal Audit (SIA 110-740) and SIA 230 risk-based methodology.

Why internal audit matters for your business

Audit Committee-Grade Quarterly Pack

Each quarter ends with a polished Audit Committee pack — risk dashboard, FCCC findings, management responses, closure status, fraud watch and KPIs. Directors come prepared, meetings move faster.

Clean ICFR Opinion for Director's Report

Annual IFC effectiveness opinion documentation supports the Section 134(5)(e) assertion in the Director's Report and Section 143(3)(i) statutory auditor opinion. No qualifications, no boilerplate.

CARO 2020 Sign-Off Smoothened

Internal audit work product made available to the statutory auditor in the format expected — Clause 3(xviii) consideration and Clause 3(xiv) adequacy reporting completed without delay.

How the engagement runs end to end

Engagement Scoping & Risk Universe

Section 138 applicability confirmed for the Chennai entity. Audit Committee or Board approval obtained for scope, periodicity and methodology under Rule 13(2). Risk universe of all business processes built — typically 30-60 processes mapped, with inherent risk scoring on likelihood and impact.

Walkthroughs & Risk Heat Map

Walkthroughs performed for each material cycle — revenue, procurement, payroll, inventory, fixed assets, treasury — with process narrative, control points and SOD inventory documented. Existing controls mapped, residual risk computed and the heat map presented to the Audit Committee.

Testing of Design (ToD)

Key controls identified per cycle — preventive, detective and corrective. Testing of Design through inspection of single instances and walkthrough confirmation. Design deficiencies (if any) raised immediately as significant deficiencies under ICAI Guidance Note IFC 2015 categorisation.

What FilingPro brings to the engagement

Section 138 Mandatory Triggers Tracked

Paid-up capital ≥ ₹50 crore, turnover ≥ ₹200 crore, borrowings ≥ ₹100 crore, deposits ≥ ₹25 crore — Section 138 thresholds tracked quarterly so Chennai entities never miss the appointment trigger.

Risk-Based Audit Methodology

Every engagement starts with a risk universe build, inherent versus residual risk scoring and Audit Committee-presentable heat map — high-risk areas get deep ToE, low-risk areas get analytical review. No checklist tick-box.

COSO 2013 Five Components Mapped

Control Environment, Risk Assessment, Control Activities, Information & Communication, Monitoring — every key control mapped to the COSO component for Chennai listed and Section 138 entities.

Store-level internal audit standardised cash and inventory controls for a {{area_name}} retail chain

Loan-portfolio internal audit surfaced KYC and provisioning gaps at a {{area_name}} NBFC

Procurement and pharmacy internal audit curbed leakage at a {{area_name}} multi-specialty hospital

Project internal audit strengthened billing and subcontractor controls for a {{area_name}} construction firm

Other Services in Maduravoyal-Vanagaram Road, Chennai

What Maduravoyal-Vanagaram Road Clients Say