CS Professional · Internal and Forensic Audit

Basic Concepts of Forensic Audit: formula sheet

Full chapter guide

Key formulas

Core definition: Forensic audit = Accounting + Auditing + Investigation, aimed at legal evidence; Use this one-line definition to open any answer on meaning.
Main objectives: Detect fraud + Establish facts and quantum + Identify persons involved + Gather admissible evidence + Support recovery and prevention; Write these as separate bullet points; each earns marks.
Statutory audit vs forensic audit (focus): Statutory: true and fair opinion, sampling, materiality. Forensic: specific allegation, in-depth, evidence for court; Use this contrast when a question asks how forensic audit differs from ordinary audit.
Purpose contrast: Statutory = true and fair opinion; Internal = control and risk assurance; Forensic = fraud finding and evidence; Lead every comparison answer with purpose.
Timing contrast: Statutory = periodic, after year end; Internal = continuous or periodic; Forensic = event-driven, on suspicion; Forensic audit is not a fixed annual cycle.
Approach contrast: Statutory = sampling and materiality; Internal = risk-based; Forensic = targeted, detailed, suspicion-led; Forensic work is not bound by materiality in the same way, since small amounts may show a fraud pattern.
Outcome contrast: Statutory = audit report with opinion; Internal = recommendations to management; Forensic = findings report usable as evidence; Say who receives each report.
Investigation link: Forensic audit = financial examination tool; Investigation = wider legal inquiry that may use it; Do not treat the two words as identical.
Fraud triangle: Fraud = Pressure + Opportunity + Rationalisation; A conceptual model, not a mathematical formula. Removing or weakening any one side lowers fraud risk. Opportunity is the easiest to reduce through controls.
ACFE fraud tree branches: Occupational fraud = Asset misappropriation + Corruption + Financial statement fraud; Learn each branch with two or three examples. Asset misappropriation is the most common by number of cases; financial statement fraud is usually the costliest per case.
Fraud vs error test: Intentional act = fraud; unintentional act = error; The deciding factor is intent. The effect on the financial statements may look the same.
Section 447, Companies Act, 2013: Fraud = act, omission, concealment or abuse of position + intent to deceive, gain undue advantage or injure interests; Wrongful gain or wrongful loss need not be shown. Quote the elements in your own words.
Core ethical principles: Integrity + Objectivity + Independence + Competence and due care + Confidentiality + Professional behaviour; Use as a checklist in any ethics question. Add a line of explanation for each.
Skill categories: Technical + Investigative + Digital + Soft skills; A quick frame to structure any answer on skills required.
Independence: Independence of mind + Independence in appearance; The auditor must be unbiased in fact and must also appear so to a reasonable third party.
Evidence discipline: Collect → Preserve → Document → Maintain chain of custody → Report; Evidence must be reliable and traceable if it is to be used before a court.
Stages of a forensic audit: Acceptance → Planning → Evidence gathering → Analysis → Reporting → Testimony; Use this as the skeleton for any process question. Some textbooks add a follow-up or recovery stage, so name any extra stage you include.
Core aim of the engagement: What happened + Who + How + How much + Proof; Frame findings against these five questions in analysis and reporting.
Data analytics checks (typical): Duplicates, gaps in sequence, round sums, outliers, weekend or odd-time entries, related-party links; These are indicators for follow-up, not proof of fraud on their own.
Interview order (good practice): Neutral witnesses → Process owners → Suspect last; Gather documents first so you can test statements against evidence.
Fraud under the Companies Act, 2013: Section 447 explanation: any act, omission, concealment or abuse of position, with intent to deceive, gain undue advantage or injure interests of the company, shareholders, creditors or any other person, whether or not there is wrongful gain or loss; Intent is essential. Wrongful gain or loss need not be proved.
Auditor's duty on fraud: Section 143(12): fraud by officers or employees found during audit. Involving less than ₹1 crore: report to the Audit Committee or Board within 2 days, and the Board discloses it in its report under section 134(3)(ca). Involving ₹1 crore or more: report to the Board or Audit Committee within 2 days → allow 45 days for reply → report to the Central Government within 15 days of the reply or of the end of the 45 days; Procedure is in Rule 13 of the Companies (Audit and Auditors) Rules, 2014. For ₹1 crore or more, reporting to the Central Government is the last step of a sequence, not the first.
SFIO investigation: Section 212(1): the Central Government may assign investigation into the affairs of a company to SFIO; Triggers: a report of the Registrar or inspector under section 208, intimation of a special resolution passed by the company that its affairs are to be investigated, public interest, or a request from a Central or State Government department.
Digital evidence admissibility: Electronic record = document; computer output is admissible as a document only with the certificate in the prescribed Schedule format (BSA, 2023 section 63; earlier Evidence Act section 65B); The certificate has Part A, signed by the party (person in charge of the device or who manages the relevant activities), and Part B, signed by an expert. It covers device, process and proper functioning, and the Schedule requires the hash value of the electronic record.
PMLA core offence: Money-laundering = direct or indirect involvement in any process or activity connected with proceeds of crime and projecting it as untainted property; Proceeds of crime come from a scheduled offence.
Chain of custody: Collect → Seal and record hash → Store → Transfer with log → Produce; Every hand-over must be documented.

Quick revision

Forensic audit examines records to detect and prove fraud so the findings can support legal action.
It is usually triggered by suspicion or an allegation, unlike a statutory audit, which is periodic and opinion-based.
Statutory audit gives an opinion on true and fair view; forensic audit looks for specific wrongdoing and establishes facts.
Internal audit reviews controls and risk for management; forensic audit investigates a particular suspected fraud.
Fraud means intentional deception to gain an unfair or unlawful advantage; error is unintentional.
Fraud triangle: pressure (incentive), opportunity and rationalisation.
Main fraud groups: misappropriation of assets, fraudulent financial reporting and corruption.
A forensic auditor needs accounting, investigative and legal awareness, plus objectivity, scepticism and confidentiality.
The process runs from acceptance and planning through evidence gathering and analysis to reporting and testimony.
Techniques include document review, interviews, data analytics, tracing of transactions and digital examination.
Evidence must be relevant, reliable, properly preserved and supported by an unbroken chain of custody.
Always conclude with findings, the basis for them and clear recommendations.

Common mistakes

Defining forensic audit as just a detailed statutory audit. Fix: State that forensic audit is allegation-driven, evidence-focused and meant for legal proceedings, while statutory audit gives an opinion on financial statements.
Listing only fraud detection as the objective. Fix: Add quantifying loss, identifying those responsible, preserving evidence, supporting recovery and recommending control improvements.
Saying statutory audit is meant to detect all frauds. Fix: Write that statutory audit gives an opinion on true and fair statements using sampling and materiality, and it does not guarantee finding all frauds.
Treating forensic audit and investigation as the same. Fix: Say forensic audit is a financial examination with evidence focus, while investigation is a wider legal inquiry that can use forensic findings.
Treating every misstatement as fraud. Fix: Always apply the intent test. An unintentional misstatement is an error, even if it is large.
Writing the fraud triangle sides as pressure, opportunity and 'motive'. Fix: Use the exact terms: pressure (or incentive), opportunity and rationalisation (or attitude).
Treating a forensic auditor like a statutory auditor who gives an opinion on true and fair view. Fix: Say that the forensic report states facts, findings and quantified loss for a specific allegation and scope, not a general opinion.
Listing only accounting skills. Fix: Always cover investigative, digital, legal awareness and communication skills as well.
Treating a forensic audit like a routine statutory audit with sampling and a true-and-fair opinion. Fix: Say that a forensic audit targets a specific suspicion, is often full-scope on the area, and ends with findings usable as evidence, not an opinion on financial statements.
Listing the stages without applying them to the facts. Fix: Add facts from the case at each stage, such as the period, the department and the records to be preserved.

Exam tips

Always open with a clear definition; examiners look for the words fraud, investigation and evidence or court.
Use the audit contrast (statutory vs forensic) in at least one line, even if not asked, to show depth.
For objectives and scope questions, use short bullets with one explanatory line each.
Add an Indian context sentence to the need or importance answer; avoid quoting statistics you cannot verify.
Keep short notes to about 150 words and long answers structured with an introduction, points and a conclusion.
Always give the comparison in a side-by-side or point-by-point form, with at least five bases.
Add the evidence and legal-use row for forensic audit. It is the point many students skip.
For forensic audit versus investigation, say forensic audit is a tool and investigation is a wider legal inquiry with statutory powers.