Internal Audit for it services units around Sri Ramachandra Hospital, Porur — with WhatsApp-first document intake
Internal Audit for it services businesses in Porur near DLF Cybercity by qualified experts with a 15+ year, zero-penalty record. Call 9566-068-468.
Section 138 of the Companies Act 2013 read with Rule 13 of the Companies (Accounts) Rules 2014 makes internal audit mandatory for — every listed company; every unlisted public company with paid-up share capital ≥ ₹50 crore or turnover ≥ ₹200 crore or outstanding borrowings from banks/PFIs ≥ ₹100 crore or outstanding deposits ≥ ₹25 crore at any time during the preceding financial year; and every private company with turnover ≥ ₹200 crore or outstanding borrowings ≥ ₹100 crore. Once any limb is breached, internal audit becomes statutory.
Fixed fees · Zero hidden charges · Call 9566-068-468 for a custom quote.
Swipe to see all plans
Prices exclude GST. For enterprise pricing, call 9566-068-468.
Expert Internal Audit in Porur — qualified professionals, 15+ years experience, zero-penalty track record.
Testing of Design through walkthrough and inspection; Testing of Operating Effectiveness through reperformance with statistically valid sample sizes — daily controls 25, weekly 5, monthly 2-3 instances per SIA 320.
Oracle, SAP, Tally Prime, Microsoft Dynamics environments — ITGC reviewed across access management, change management, computer operations and program development. SOD conflict matrix built from ERP role profiles.
Annual IFC effectiveness opinion documentation prepared in the format expected by Audit Committee, statutory auditor and ROC — supporting the Section 134(5)(e) Director's Report assertion without rework.
Internal audit reports made available to the statutory auditor with scope coverage analysis — supporting CARO 2020 Clause 3(xviii) consideration and Clause 3(xiv) adequacy reporting without last-minute scramble.
Risk dashboard, observation status, FCCC finding memos, management responses, closure tracking and fraud indicators — packaged for the Audit Committee meeting under Section 177(8) at least four times a year.
Fraud risk assessment integrated into audit planning under SIA 240. ₹1 crore reporting threshold tracked, sub-threshold matters escalated to Audit Committee under Section 177(9) whistleblower mechanism.
Every Internal Audit engagement delivers measurable, guaranteed outcomes — expert professionals, on time, every time.
Why this matters here — Across Porur, the concentration of healthcare workforce housing IT services support and hospitality businesses around DLF IT Park. Practitioners note that with arterial connectivity via Mount-Poonamallee Road the Porur Toll Plaza and the Trunk Road network.
Share documents via WhatsApp to 9566-068-468. No office visit required for Porur clients.
Miss any of these and the next consequence kicks in automatically.
Deadlines in this neighbourhood — Across Porur, the concentration of healthcare workforce housing IT services support and hospitality businesses around DLF IT Park.
Deadline pressure points we see in Porur: Closer to Porur, for Porur firms managing GST and TDS across high-volume customer-facing and B2B engagements.
Records the Board's decision to appoint a chartered accountant, cost accountant or other professional as internal auditor and fixes the terms of engagement. Unlike the statutory auditor, appointment of an internal auditor is not filed with the Registrar in Form ADT-1; it is a Board minute kept in the company's records.
Where a Board resolution relating to the appointment or terms of an internal auditor falls within the matters requiring filing under Section 179(3) and the Companies (Meetings and Powers of Board) Rules 2014, it is filed in Form MGT-14. Private companies are exempt from filing many Section 179(3) resolutions, so this applies selectively.
Sets out the purpose, authority, independence, scope, reporting line and periodicity of the internal audit function, agreed between the Board, audit committee and internal auditor. It operationalises Rule 13(2) and aligns the engagement with the ICAI Framework Governing Internal Audits.
Documents the risk assessment, auditable units, coverage and calendar for the year so that higher-risk processes receive priority. Prepared under the Standards on Internal Audit dealing with planning, it forms the basis on which the audit committee monitors coverage and frequency.
Communicates observations, root causes, risk ratings and recommendations to the audit committee or Board. Prepared in line with the Standards on Internal Audit dealing with reporting, it drives management action-taken reports and feeds the internal financial controls assessment.
Evidence that the audit committee reviewed the adequacy of the internal audit function, discussed significant findings with the internal auditor and monitored follow-up, as required by Section 177. These minutes support the directors' responsibility statement and the statutory auditor's CARO reporting.
Every claim on this page can be traced back to a section or rule below.
Section 138 requires prescribed classes of companies to appoint an internal auditor to conduct a periodic internal audit of the functions and activities of the company. The internal auditor may be a chartered accountant, a cost accountant, or such other professional as the Board decides, and may be an individual, a partnership firm or a body corporate. The auditor need not be an employee of the company. The Central Government prescribes the manner and intervals of the audit through rules made under sub-section (2). This is the operative provision that distinguishes internal audit from the statutory audit under Section 143 and the tax audit under Section 44AB of the Income-tax Act 1961.
View sourceRule 13 sets out which companies must appoint an internal auditor. Every listed company is covered. An unlisted public company is covered if it had paid-up share capital of fifty crore rupees or more, or turnover of two hundred crore rupees or more, or outstanding loans or borrowings from banks or public financial institutions of one hundred crore rupees or more, or outstanding deposits of twenty-five crore rupees or more, during the preceding financial year. A private company is covered if turnover was two hundred crore rupees or more, or outstanding loans or borrowings from banks or public financial institutions were one hundred crore rupees or more. Under sub-rule (2) the Board, in consultation with the internal auditor and the audit committee, formulates the scope, functioning, periodicity and methodology.
View sourceThe Institute of Chartered Accountants of India has issued the Framework Governing Internal Audits together with a series of Standards on Internal Audit (SIA) that guide the planning, evidence gathering, documentation, supervision and reporting of an internal audit assignment. These standards promote a risk-based internal audit approach, define the nature of assurance provided, and address internal controls, fraud consideration and communication with those charged with governance. While the SIAs are recommendatory for members, they represent the accepted professional benchmark and are frequently referenced when the Board or audit committee assesses the quality and independence of the internal audit function.
View sourceSection 450 is the residuary penalty provision. Where a company or officer contravenes a provision of the Act, or a rule made under it, for which no specific penalty is separately provided, the company and every officer in default are liable to a penalty of ten thousand rupees, and in the case of a continuing contravention a further penalty of one thousand rupees for each day the contravention continues, subject to a maximum of two lakh rupees for a company and fifty thousand rupees for an officer. Because Section 138 and Rule 13 do not carry a bespoke penalty, failure to appoint an internal auditor when required is enforced through Section 450.
View sourceSection 177 governs the Audit Committee, which prescribed companies must constitute. The committee's terms of reference expressly include evaluation of internal financial controls and risk management systems and reviewing the adequacy of the internal audit function, including the structure of the internal audit department, staffing and seniority of the official heading it, reporting structure, coverage and frequency of internal audit. The committee also discusses with internal auditors any significant findings and follow-up. Where no audit committee exists, the Board discharges this oversight. This is why the internal audit report is directed to the audit committee or Board rather than filed with the Registrar.
View sourceSection 143(3)(i) requires the statutory auditor to report on whether the company has an adequate internal financial controls system with reference to financial statements and its operating effectiveness. Although this is a statutory-audit reporting obligation, a robust internal audit function is the primary way management builds and tests those controls during the year. Internal audit findings on control design and operating effectiveness feed directly into management's own assessment and reduce the risk of a modified opinion. This connection explains why internal audit scope commonly maps to the internal financial controls over financial reporting framework.
View sourcePorur (PIN 600116) falls under the Poonamallee Division of the Chennai West, the jurisdiction that handles statutory matters for businesses at this PIN. Because PIN 600116 sits inside the Chennai West jurisdiction, the handling office for Porur stays consistent across years, which matters when filings or approvals span cycles. Businesses registered in Porur share the Chennai West jurisdiction, and their statutory matters route through the same Poonamallee Division each time. Every Porur engagement we open begins with the basics: PIN 600116, the Poonamallee Division, and the coordinates 13.0382, 80.1565 that anchor the locality.
Commercial activity in Porur runs very high, so Internal Audit volumes scale through peak months and we staff the Porur desk accordingly. Freight and foot traffic from the Porur Junction hub pull steady daily commerce through Porur, so there is rarely a quiet filing month in this it corridor and healthcare hub pocket. Most commerce in Porur — invoices, expenses, purchases and statutory records — eventually surfaces in the Internal Audit working file we maintain for clients here. Working in Porur brings a logistical edge: proximity to Sri Ramachandra Hospital and the Porur Junction corridor keeps physical document handling fast.
Internal Audit for healthcare businesses in Porur hinges on getting the sector's recurring entries right the first time. The healthcare firms we serve in Porur value a Internal Audit partner who already understands their sector's compliance rhythm. For a healthcare business in Porur, the Internal Audit scope is rarely generic; we tailor the checklist to how that sector actually transacts. Mixed healthcare activity across Porur means our Internal Audit team keeps sector playbooks ready rather than improvising per client.
Document intake for Porur clients runs over WhatsApp, so there is no office visit and no paper shuffle for a Internal Audit engagement. We keep a repeatable Internal Audit checklist for Porur so nothing in the cycle is improvised or missed. Turnaround for Porur Internal Audit is deterministic — fixed fee, a scoped timeline, and a same-business-day acknowledgement once filed. Working papers for Porur Internal Audit engagements stay archived and retrievable, which makes any later notice or query straightforward to answer.
We treat Porur and Maduravoyal as one catchment for Internal Audit, which keeps documentation and turnaround consistent. Proximity to Maduravoyal means a Porur engagement can extend across the locality cluster with no change in cadence. Serving Porur and Maduravoyal from one team keeps Internal Audit turnaround identical across the cluster. A client relocating between Porur and Maduravoyal keeps the same Internal Audit file and the same team.
Patterns we track for Porur include healthcare documentation gaps, timing mismatches, and the questions the Poonamallee Division tends to raise. Sector signals in Porur — seasonal healthcare swings and peak-period volumes — shape how we schedule Internal Audit work. Recurring gaps in Porur healthcare records are the first thing our Internal Audit review closes out. Each engagement in Porur adds to a record of what the Chennai West jurisdiction expects, sharpening the next Internal Audit file.
A startup setting up near DLF Cybercity in Porur gets a Internal Audit foundation built for the Poonamallee Division from day one. Incorporating in Porur comes with jurisdiction, registration and Internal Audit steps that we sequence so nothing stalls the launch. For a new business incorporating in Porur or shifting its principal place of business here, Internal Audit setup is one of the first things to get right. We onboard new Porur entities onto a Internal Audit cadence that is audit-ready from the very first cycle.
Section 138 Companies Act risk-based internal audit for Porur private and public companies — SIA-compliant methodology, COSO 2013 framework, quarterly Audit Committee reporting and ICFR support for the Section 134(5)(e) Director's Report assertion.
Appointed under Section 138 read with Rule 13, our internal auditors build the Porur entity's risk universe, score inherent and residual risk, prepare the heat map and design audit cycles around the highest-residual-risk processes — fully aligned with SIA 230.
Internal Financial Controls testing under the ICAI Guidance Note IFC 2015 covers all five COSO components — Control Environment, Risk Assessment, Control Activities, Information & Communication and Monitoring — with full ToD and ToE documentation feeding the Section 134(5)(e) assertion.
Quarterly internal audit reports formatted for Audit Committee meetings under Section 177(8), with management responses, closure tracking and CARO 2020 Clause 3(xviii) coordination with the statutory auditor — ready for Porur listed and threshold-bound entities.
Companies (Auditor's Report) Order 2020 Clause 3(xviii) requires the statutory auditor to consider the internal audit reports of the company while reporting under CARO. Clause 3(xiv) of CARO 2020 specifically requires the auditor to state whether the company has an internal audit system commensurate with its size and nature of business and whether the reports...
Sample size depends on (i) confidence level required — typically 90%/95%, (ii) tolerable rate of deviation, (iii) expected rate of deviation, and (iv) population size. ICAI uses statistical sampling tables and AICPA guidance. For ICFR testing, common sample sizes are — daily controls 25 instances, weekly 5, monthly 2-3, quarterly 2, annual 1. SIA 320...
Section 138 of the Companies Act 2013 read with Rule 13 of the Companies (Accounts) Rules 2014 makes internal audit mandatory for — every listed company; every unlisted public company with paid-up share capital ≥ ₹50 crore or turnover ≥ ₹200 crore or outstanding borrowings from banks/PFIs ≥ ₹100 crore or outstanding deposits ≥ ₹25...
Section 138(1) read with Rule 13(1) prescribes that the internal auditor may be a Chartered Accountant, a Cost Accountant (CMA), or such other professional as the Board may decide. The auditor may be an individual, a partnership firm or a body corporate. The internal auditor need not be a CA in practice — an employee...
No. Section 144 of the Companies Act 2013 expressly prohibits the statutory auditor from rendering internal audit services to the same company, its holding or subsidiary. The same firm cannot perform both roles. ICAI Code of Ethics and the Standards on Auditing reinforce this independence requirement. A Chartered Accountant in practice can be internal auditor...
Under Section 138(1), the Board of Directors appoints the internal auditor on the recommendation of the Audit Committee where one is constituted under Section 177. For listed companies and Section 138 entities meeting Rule 6 thresholds, an Audit Committee is mandatory. Section 177(4) requires the Audit Committee to review the internal auditor's appointment, scope, frequency...
What Porur clients want to know before signing: Closer to Porur, within Porur's medical and IT services belt anchored by Sri Ramachandra.
Reading this guide locally — Across Porur, across Porur's residential commercial mix between the Toll Plaza and Trunk Road.
Internal Audit in Chennai () is delivered by qualified Chartered Accountants under Section 138 of the Companies Act 2013 read with Rule 13 of the Companies (Accounts) Rules 2014. We build the risk universe, score inherent and residual risk, present the heat map to your Audit Committee and design quarterly audit cycles around your highest-residual-risk processes — fully aligned with ICAI Standards on Internal Audit (SIA 110-740) and SIA 230 risk-based methodology.
Each quarter ends with a polished Audit Committee pack — risk dashboard, FCCC findings, management responses, closure status, fraud watch and KPIs. Directors come prepared, meetings move faster.
Annual IFC effectiveness opinion documentation supports the Section 134(5)(e) assertion in the Director's Report and Section 143(3)(i) statutory auditor opinion. No qualifications, no boilerplate.
Internal audit work product made available to the statutory auditor in the format expected — Clause 3(xviii) consideration and Clause 3(xiv) adequacy reporting completed without delay.
Section 138 applicability confirmed for the Chennai entity. Audit Committee or Board approval obtained for scope, periodicity and methodology under Rule 13(2). Risk universe of all business processes built — typically 30-60 processes mapped, with inherent risk scoring on likelihood and impact.
Walkthroughs performed for each material cycle — revenue, procurement, payroll, inventory, fixed assets, treasury — with process narrative, control points and SOD inventory documented. Existing controls mapped, residual risk computed and the heat map presented to the Audit Committee.
Key controls identified per cycle — preventive, detective and corrective. Testing of Design through inspection of single instances and walkthrough confirmation. Design deficiencies (if any) raised immediately as significant deficiencies under ICAI Guidance Note IFC 2015 categorisation.
Paid-up capital ≥ ₹50 crore, turnover ≥ ₹200 crore, borrowings ≥ ₹100 crore, deposits ≥ ₹25 crore — Section 138 thresholds tracked quarterly so Chennai entities never miss the appointment trigger.
Every engagement starts with a risk universe build, inherent versus residual risk scoring and Audit Committee-presentable heat map — high-risk areas get deep ToE, low-risk areas get analytical review. No checklist tick-box.
Control Environment, Risk Assessment, Control Activities, Information & Communication, Monitoring — every key control mapped to the COSO component for Chennai listed and Section 138 entities.
What Porur clients usually ask next: Closer to Porur, for Porur firms managing GST and TDS across high-volume customer-facing and B2B engagements.
Form Internal Audit Report is the statutory form prescribed for internal audit engagements under the applicable Act. It carries the information set required by the prescribed authority and follows the timeline set by the relevant section or rule.
Form Section 138 is the statutory form prescribed for internal audit engagements under the applicable Act. It carries the information set required by the prescribed authority and follows the timeline set by the relevant section or rule.
Form Risk Matrix is the statutory form prescribed for internal audit engagements under the applicable Act. It carries the information set required by the prescribed authority and follows the timeline set by the relevant section or rule.
Companies Section 138 is the operative provision of the Companies Act that governs internal audit in the present context. It sets the substantive obligation, the procedural pathway and the consequences of non-compliance.
materiality threshold is a recurring compliance risk in internal audit engagements. Identifying it early in the workflow lets the practitioner mitigate the exposure before it ripens into an adverse statutory consequence.
control gap reporting is a recurring compliance risk in internal audit engagements. Identifying it early in the workflow lets the practitioner mitigate the exposure before it ripens into an adverse statutory consequence.
board-level reporting is a recurring compliance risk in internal audit engagements. Identifying it early in the workflow lets the practitioner mitigate the exposure before it ripens into an adverse statutory consequence.
Numerical examples showing tax + interest + penalty across common default scenarios.
How Porur businesses typically avoid these: Closer to Porur, the concentration of healthcare workforce housing IT services support and hospitality businesses around DLF IT Park, which is why for Porur firms managing GST and TDS across high-volume customer-facing and B2B engagements.
How the local trade mix shapes this — Across Porur, Porur's mix of premium gated residences mid-tier apartments and high-density retail along Trunk Road.
Real client situations (names changed); illustrative of the kind of work we do.
Why these Porur engagements look the way they do: Closer to Porur, the SME businesses across Ramachandra Nagar SS Colony Lakshmipuram and Kuselar Nagar, which is why for Porur firms managing GST and TDS across high-volume customer-facing and B2B engagements.
“FilingPro took over our Section 138 internal audit when we crossed the ₹200 crore turnover threshold. They built the risk universe in three weeks, walked through every cycle and the first quarterly Audit Committee pack was ready inside 60 days. SIA-compliant work product, no fluff.”
“Our listed entity needed ICFR testing aligned with the ICAI Guidance Note 2015 — FilingPro mapped every key control to the COSO components, ran ToD and ToE with statistical sampling and the IFC documentation cleared the statutory auditor's review without a single rework. Excellent depth.”
“Independent internal audit on procurement and inventory cycles for our Chennai manufacturing unit. They identified a vendor SOD conflict that had been open for two years and a slow-moving inventory provision shortfall — both quantified and remediated within the quarter. Real value, not a tick-box exercise.”
“Switched to FilingPro after a Big-Four practice quoted three times the fee for our private limited company internal audit. Same SIA framework, same quality reports, fraction of the cost — and the partner attends every Audit Committee meeting. Highly recommended for SME boards.”
“ITGC review of our Oracle ERP environment — access management, change management, SOD conflict matrix, privileged user recertification. FilingPro's IT auditor knew Oracle role profiles cold. Findings drove three months of remediation and our SOX-grade documentation is now audit-ready.”
“Section 143(12) fraud reporting concern surfaced through our whistleblower line. FilingPro investigated the case under SIA 240 protocols, documented evidence, presented findings to the Audit Committee under Section 177(9) and the matter was closed without any reportable fraud. Discreet and professional handling.”
Common questions from Porur clients. Call 9566-068-468 for specific queries.
Across Porur we look after firms on Poothapedu Road, Samayapuram Nagar Main Road, 11th Street, Chennai Bypass Expressway and Porur Bridge as well as the Arcot Road, Kodambakkam – Sriperumbudur Road, Mount - Poonamallee - Avadi Road and Alapakkam Main Road corridors — local Internal Audit without the cross-city travel.
Professional Internal Audit in Porur, Chennai. Call @ 9566-068-468. Offices at Maduravoyal, Nerkundram & Nolambur (upcoming). 15+ years experience, 4.9★ rated.
FilingPro Chennai — 15+ Years of Expert Tax & Business Consulting. Offices at Maduravoyal, Nerkundram & Nolambur (upcoming), Chennai. Call @ 9566-068-468. Disclaimer: Information on this page is for general guidance only and does not constitute legal, financial or tax advice. Consult a qualified professional for specific advice.