← Insights

Auditor's reports look routine until one clause is wrong. 10 checkpoints CS professionals

CS RICHA KUMAR & ASSOCIATES

How to Prepare an Auditor's Report

A section-by-section guide, under the Companies Act, 2013 and the Standards on Auditing

An Independent Auditor's Report follows a fixed architecture under the Standards on Auditing and the Companies Act, 2013 — but "fixed structure" doesn't mean "fill in the blanks." Every section carries specific legal content that has to be verified against the current year's facts and current law, not copied forward from the last report you drafted. Here is every section, in order, with what belongs in it.

1. Title and Addressee

The report must be titled "Independent Auditor's Report" — this distinguishes it clearly from reports issued by parties who are not independent. It is addressed "To the Members of [Company Name]", not to the Board of Directors — the report is a communication to the shareholders, who appointed the auditor.

2. Report on the Audit of the Financial Statements

This is the substantive section, and it has three standard subsections.

2.1 Opinion

State clearly which financial statements were audited — typically the Balance Sheet as at the year-end date, the Statement of Profit and Loss, the Cash Flow Statement, the Statement of Changes in Equity (if applicable), and Notes to the accounts including a summary of significant accounting policies.

The opinion sentence must then conclude on every statement listed in the scope — this is the single most common drafting slip. If the Cash Flow Statement is listed as part of the audit scope, the opinion must state the financial statements give a true and fair view of the state of affairs, the profit, and the cash flows for the year. Dropping cash flows from the opinion while including it in scope is an internal inconsistency.

2.2 Basis for Opinion

State that the audit was conducted in accordance with the Standards on Auditing (SAs) specified under Section 143(10) of the Companies Act, 2013. Confirm independence from the company in accordance with the Code of Ethics issued by ICAI and the ethical requirements relevant to the audit under the Act. Conclude that the audit evidence obtained is sufficient and appropriate to provide a basis for the opinion.

2.3 Key Audit Matters (where applicable)

Key Audit Matters are mandatory under SA 701 for listed entities. For unlisted companies, this section is not required unless the auditor chooses to include it voluntarily. Don't include a boilerplate KAM section for a private limited company audit unless there's a genuine reason to.

3. Other Information

This section describes the Board's responsibility for information included in the annual report but outside the financial statements themselves (such as the Directors' Report or Management Discussion & Analysis). State that the auditor's opinion does not cover this other information and no assurance conclusion is expressed on it. Confirm that, based on the procedures performed, nothing has come to the auditor's attention indicating the other information is materially inconsistent with the financial statements.

⚠ Keep this section limited to exactly this. A common error is misplaced content from elsewhere in the report — most often the Rule 11(d) loan-layering representations — landing here by copy-paste mistake. If a sentence references "point number 3, 4, 5" or similar cross-references that don't belong to this section's subject matter, it's been pasted in from the wrong place.

4. Management's Responsibility for the Financial Statements

State that the Board of Directors is responsible for the matters in Section 134(5) of the Companies Act, 2013 — preparation of financial statements giving a true and fair view, in accordance with accounting standards specified under Section 133. This includes maintenance of adequate accounting records for safeguarding assets and preventing fraud, selection of appropriate accounting policies, and design and operation of adequate internal financial controls.

Include the going-concern responsibility — that management must assess the company's ability to continue as a going concern and disclose related matters, unless management intends to liquidate the company or has no realistic alternative. State that the Board also oversees the company's financial reporting process.

5. Auditor's Responsibility for the Audit of the Financial Statements

State the objective: reasonable assurance that the financial statements as a whole are free from material misstatement, and that reasonable assurance is a high level of assurance but not a guarantee an audit will always detect a material misstatement.

Cover the standard elements — exercising professional judgment and professional scepticism throughout, identifying and assessing risks of material misstatement, obtaining an understanding of internal control relevant to the audit (and, under Section 143(3)(i), expressing an opinion on the adequacy of internal financial controls where applicable), evaluating accounting policies and estimates, concluding on the appropriateness of the going-concern basis, and evaluating overall presentation and structure.

Include the standard closing paragraphs on communication with those charged with governance regarding audit scope, timing, significant findings, and compliance with independence requirements — and, where relevant, materiality.

6. Report on Other Legal and Regulatory Requirements

This is where most of the compliance-specific content sits, and where most errors occur because it has to be rebuilt with current thresholds and current facts every year.

6.1 CARO 2020 applicability

State whether the Companies (Auditor's Report) Order, 2020 applies. A private company is exempt only if all four of the following hold simultaneously:

Not a subsidiary or holding company of a public company

Paid-up capital plus reserves does not exceed ₹1 crore

Total borrowings from any bank or financial institution do not exceed ₹1 crore at any point during the year

Turnover does not exceed ₹10 crore

⚠ All four conditions need to be explicitly verified and stated. The "not a subsidiary/holding of a public company" condition is the one most often silently dropped from the paragraph — verify it directly against the shareholding structure, don't assume it.

If CARO does apply, the report must separately annex the auditor's responses to all applicable clauses of the Order (covering areas like fixed assets, inventory, statutory dues, and related party transactions, among others).

6.2 Matters under Section 143(3)

Report on each of the following:

Whether all information and explanations necessary for the audit were obtained

Whether proper books of account as required by law have been kept

Whether the Balance Sheet, Statement of Profit and Loss, and Cash Flow Statement are in agreement with the books of account

Whether the financial statements comply with the Accounting Standards under Section 133, read with Rule 7 of the Companies (Accounts) Rules, 2014

Director disqualification status under Section 164(2), based on written representations received from directors — make sure the "as on" date in this conclusion matches the date the representations themselves were taken as on; a mismatch between these two dates is a common and easily-missed error

Whether the company is exempt from Internal Financial Controls reporting under the 13 June 2017 MCA notification — this exemption requires all three of: turnover not exceeding ₹50 crore, borrowings from banks/financial institutions/body corporates not exceeding ₹25 crore at any point during the year, and no public deposits accepted. All three need to be cited, not just the first two.

Applicability of Section 197(16) managerial remuneration reporting — note explicitly that this section does not apply to private companies, where relevant

6.3 Matters under Rule 11 of the Companies (Audit and Auditors) Rules, 2014

Report on each applicable clause:

(a) Pending litigations and their impact on financial position

(b) Provision for material foreseeable losses on long-term contracts, including derivative contracts

(c) Amounts required to be transferred to the Investor Education and Protection Fund

(d) The loan-layering representations — (i) management's representation that no funds have been advanced, loaned, or invested by the company to any intermediary with an understanding that the intermediary will lend or invest on behalf of the company in identified "Ultimate Beneficiaries"; (ii) the mirror representation for funds received by the company from funding parties; (iii) the auditor's conclusion on whether these representations contain any material misstatement, based on audit procedures performed

(e) Dividend declared or paid in compliance with Section 123

(f) (where applicable) Whether the company has used any borrowed funds/share premium for share buyback or similar restricted purposes

(g) The audit trail (edit log) clause — this is the one requiring the most year-to-year attention

⚠ The requirement under the proviso to Rule 3(1) of the Companies (Accounts) Rules, 2014 is mandatory for financial years commencing on or after 1 April 2023. For any report covering FY 2023-24 onward, the auditor must actually report on whether the accounting software used has the audit trail feature enabled and operating throughout the year, and whether the audit trail has been preserved as per statutory retention requirements — not state that the clause is inapplicable. A paragraph that says the requirement is applicable from April 2023 and then concludes reporting on it is "not applicable" for a later year is internally contradictory and almost always leftover language from an earlier report that wasn't updated.

7. Signature Block

Every report needs, at minimum:

Name of the audit firm

Signature of the partner, in their own name

Membership number of the signing partner

Firm Registration Number (FRN)

UDIN (Unique Document Identification Number)

Place of signing

Date of the report

A report without a complete signature block is not a valid, executable document, regardless of how complete the body of the report is.

A Closing Note on Process

The structure above rarely changes year to year. What changes is the content within it — thresholds, applicability conditions, newly notified rules (audit trail being the clearest recent example), and the client's own facts. The single habit that prevents most of the errors described above: treat every paragraph that cites a rule, a date, or a monetary threshold as something to be re-verified against this year's law and this year's facts, not copied forward because it was correct last time.

CS Richa Kumar & Associates

www.csrichakumar.com · richakumar86@gmail.com ·

This post is for general informational purposes and does not constitute legal advice. For guidance specific to your situation, consult a qualified professional.

← Back to all insights