Skip to content

Business Finance · Regulation of financial reporting of incorporated entities

Audit and Auditor Regulation: Appointment, Rotation and NFRA

Updated 11 October 2026 · Fact-checked

Audit regulation makes sure a company's accounts are checked by an independent professional. Shareholders appoint the statutory auditor, rotation limits how long one auditor or firm stays, and independence rules protect objectivity. The auditor reports to members, the audit committee oversees the process, and the NFRA regulates auditing quality for specified entities.

Understand Audit and Auditor Regulation

Shareholders own the company but directors run it. Directors prepare the accounts, so shareholders need someone independent to check them. That person is the statutory auditor. The audit gives reasonable assurance that the accounts show a true and fair view. It does not guarantee that no fraud or error exists.

The auditor is appointed by the members at the annual general meeting, not by the directors. The first auditor is usually appointed by the board soon after incorporation and holds office until the first AGM. After that, members appoint an auditor for a five-year term. The auditor holds office from the conclusion of one AGM until the conclusion of the sixth AGM. Ratification of the appointment at each AGM is no longer required. The company must also check that the auditor is eligible and has given a written consent and certificate.

To protect independence, the Act limits tenure. This is rotation. An individual auditor can serve one term of five years. An audit firm can serve two terms of five years. After that comes a cooling-off period of five years. During the cooling-off period, the auditor or firm, and any firm that has a common partner with it, cannot be appointed as auditor of that company. Rotation applies to listed companies and to prescribed classes of companies: unlisted public companies with paid-up capital of ₹10 crore or more, private companies with paid-up capital of ₹50 crore or more, and all companies with borrowings from banks or public financial institutions of ₹50 crore or more. Check the exact thresholds in your study material before the exam.

Independence is also protected by a list of disqualifications and prohibited services. An auditor cannot hold certain interests in the company, cannot be an officer or employee of it, and cannot provide certain non-audit services such as accounting and book-keeping, internal audit or investment advisory to the company or its holding or subsidiary companies. The idea is simple: a person cannot audit work they helped create.

The auditor reports to members on whether the financial statements give the information required by the Act in the manner required and a true and fair view of the state of affairs, profit or loss and cash flows. Auditors must also report on specified matters, and must report suspected fraud as the law requires. Listed companies and prescribed classes of public companies must have an audit committee of the board, with a majority of independent directors. It recommends the auditor's appointment, remuneration and terms, reviews independence and discusses the audit findings. The National Financial Reporting Authority (NFRA) is the independent regulator. It monitors and enforces auditing and accounting standards, oversees the quality of audit, and can investigate and take action against auditors of the companies within its remit, mainly listed companies and large unlisted ones.

Key rules to remember

Appointment term
Auditor appointed by members at AGM for 5 years: from the conclusion of one AGM to the conclusion of the sixth AGM
Appointment is by members, not by the board, apart from the first auditor and casual vacancies. Ratification at each AGM is no longer required.
Rotation of individual auditor
Individual: maximum 1 term of 5 consecutive years
Applies to listed companies and prescribed classes of companies (unlisted public companies with paid-up capital of ₹10 crore or more, private companies with paid-up capital of ₹50 crore or more, and companies with bank or institutional borrowings of ₹50 crore or more). During the 5-year cooling-off period the individual cannot be appointed as auditor of the company.
Rotation of audit firm
Firm: maximum 2 terms of 5 consecutive years (10 years)
Followed by a cooling-off period of 5 years. During it, the firm and any firm with a common partner cannot be appointed as auditor of the company.
Prohibited services
No accounting, internal audit, investment advisory, etc. for the audited company
Applies also to the holding and subsidiary companies. Learn the idea: no self-review.
Audit report opinion
Financial statements give the information required by the Act in the manner required and a true and fair view of the state of affairs, profit or loss and cash flows
The auditor gives an opinion, not a guarantee. The directors remain responsible for preparing the accounts.
NFRA role
NFRA = standards recommendation + monitoring + enforcement + audit quality review
Remit covers listed companies and prescribed large unlisted companies.

How to solve Audit and Auditor Regulation questions

Audit regulation questions test who does what, for how long and why. Use the same frame each time.

  1. 1Read the question and identify the party involved: members, board, audit committee, auditor or NFRA.
  2. 2Name the rule being tested: appointment, rotation, independence, reporting or oversight.
  3. 3State the rule in plain words with its condition, such as listed company or prescribed class.
  4. 4Apply it to the facts. Count years carefully for rotation questions.
  5. 5Link the rule to its purpose: independence, true and fair view, or investor protection.
  6. 6Give a clear conclusion in one sentence, and note any exception or caveat.
  7. 7For written answers, add one line on the consequence, such as disqualification or NFRA action.

Quickest way: Who, how long, why

When to use it: Use this for multiple-choice questions and short written parts where you have under two minutes.

  1. Who appoints? Members at the AGM. In listed and prescribed public companies, the audit committee recommends the appointment.
  2. How long? Five-year term, to the conclusion of the sixth AGM. Individual one term, firm two terms, then five-year cooling-off.
  3. What bars an auditor? Conflicting interests and prohibited non-audit services.
  4. Who checks the auditor? The audit committee inside the company (where required) and NFRA outside it.
  5. Eliminate any option that says the board or management appoints the auditor, or that gives rotation without a cooling-off period.

Common mistakes in Audit and Auditor Regulation

  • Saying the directors appoint the statutory auditor.

    Students remember that the board appoints the first auditor and assume this is the general rule.

    Fix: Remember the first auditor and casual vacancies are the exceptions. Normally members appoint at the AGM. In listed and prescribed public companies, the audit committee recommends the appointment.

  • Mixing up the rotation limits for individuals and firms.

    Both use five-year blocks, so the numbers blur.

    Fix: Write it as 5 for a person, 5+5 for a firm, then a five-year break. Check you apply it only to companies the rules cover.

  • Forgetting the cooling-off period.

    Students focus on the maximum term and stop there.

    Fix: Always finish the rule with the five-year gap before the same auditor or firm may return.

  • Believing the auditor prepares the accounts or guarantees they are free of fraud.

    The word audit sounds like full checking.

    Fix: State that directors prepare the accounts and the auditor gives an opinion that gives reasonable assurance of a true and fair view.

  • Treating NFRA and the audit committee as the same body.

    Both oversee audit quality.

    Fix: The audit committee is a board committee inside the company. NFRA is an external statutory regulator.

  • Listing non-audit services as allowed because they are profitable and related.

    Students think expertise in the company's affairs makes the service harmless.

    Fix: Explain the self-review threat: an auditor cannot objectively review work they performed or advised on.

Worked examples

Example 1

A listed company appointed an audit firm at its AGM in 2017 for a first five-year term, after the Act came into force, and reappointed it for a second term ending in 2027. Assume each term runs from AGM to AGM, so the years are approximate. Can the same firm, or a firm with a common partner, be appointed as its auditor in 2030? Explain.

Show the solution
  1. Identify the rule: for the companies covered by rotation, a firm may serve at most two terms of five consecutive years.
  2. Count the service: each term runs from one AGM to the conclusion of the sixth AGM. On these approximate dates, 2017 to 2022 is the first term and 2022 to 2027 is the second term, giving ten years.
  3. The firm has reached the limit, so a cooling-off period of five years applies after the second term ends in 2027.
  4. The five-year bar runs from 2027 to about 2032. The year 2030 falls inside it, so the firm cannot be appointed in 2030.
  5. The bar also covers any firm with a common partner, so the firm cannot return through a related firm.
  6. Give the reason: rotation reduces familiarity and protects independence.

Answer: No. The firm completed two five-year terms ending in 2027, so it is barred for five years, to about 2032. It cannot be appointed in 2030, and neither can a firm with a common partner.

Example 2

Explain how a statutory auditor is appointed and why the audit committee and NFRA matter for the quality of the audit.

Show the solution
  1. Appointment: the board appoints the first auditor, who holds office until the first AGM. After that, members appoint an auditor at the AGM for a five-year term, to the conclusion of the sixth AGM, after checking eligibility, written consent and certificate.
  2. Audit committee: in listed and prescribed public companies it has a majority of independent directors. It recommends the auditor and fee, reviews independence and discusses findings, so the auditor is not controlled by executive management.
  3. Independence rules: disqualifications and the ban on certain non-audit services reduce conflicts of interest.
  4. NFRA: an external regulator, it oversees auditing and accounting standards, monitors audit quality and can investigate and take action against auditors of companies in its remit.
  5. Conclude: together these layers give shareholders and other users greater confidence that the accounts are a true and fair view.

Answer: Members appoint the auditor at the AGM for a five-year term. Where required, the audit committee recommends and monitors the auditor internally, and NFRA regulates audit quality externally, which protects independence and builds trust in the accounts.

Exam tips

  • Learn the numbers as a set: 5 years, 5+5 for a firm, 5-year cooling-off. Write them with the condition about which companies they cover.
  • In multiple-choice questions, watch for options that give appointment power to the board or management. These are usually wrong.
  • For long answers, structure by theme: appointment, independence, reporting, oversight. Add the purpose in one line for each.
  • Always separate directors' responsibility for preparing accounts from the auditor's responsibility to give an opinion.
  • Check the latest study material for exact thresholds and NFRA remit, because rules can be amended.

Practice questions from Regulation of financial reporting of incorporated entities

Audit and Auditor Regulation in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Audit and Auditor Regulation: frequently asked questions

What is the auditor rotation rule under the Companies Act 2013?

For listed companies and prescribed classes of companies, an individual auditor can serve one term of five years and an audit firm up to two terms of five years. A cooling-off period of five years then applies. During it, the auditor or firm, and any firm with a common partner, cannot be appointed as auditor of the company. The prescribed classes are unlisted public companies with paid-up capital of ₹10 crore or more, private companies with paid-up capital of ₹50 crore or more, and companies with bank or institutional borrowings of ₹50 crore or more. Check the thresholds in your study material.

What is NFRA and what does it do?

The National Financial Reporting Authority is an independent regulator set up under the Companies Act 2013. It recommends accounting and auditing standards, monitors compliance, reviews audit quality and can investigate and penalise auditors for companies within its remit.

How are statutory auditors appointed under the Companies Act?

The board appoints the first auditor, who serves until the first AGM. After that, members appoint an auditor at the AGM for a five-year term, running to the conclusion of the sixth AGM. In listed companies and prescribed classes of public companies, the audit committee recommends the appointment. The auditor must be eligible and give written consent.

Is audit regulation important for the IAI core principles exams?

It appears in the Business Finance material on company accounts and governance. Expect short questions on who appoints the auditor, why rotation exists and what the audit committee does. Learn the purpose behind each rule, not only the numbers.