Advanced Auditing, Assurance and Professional Ethics · Due Diligence, Investigation & Forensic Accounting

Due Diligence Process and Reporting for CA Final Audit

Updated 5 October 2026 · Fact-checked

Due diligence is a structured review of a target business, done before a deal, to confirm facts, find risks and support price and terms. You solve questions by following stages: define scope, plan, collect information, analyse, flag red flags, quantify impact, then report findings and recommendations to the client.

Understand Due Diligence Process and Reporting

Due diligence is a careful check of a business, asset or transaction before you commit to it. A buyer, investor or lender wants to know if what the seller says is true, and what could go wrong. The aim is an informed decision on whether to proceed, at what price and on what terms.

A due diligence engagement is not a statutory audit. It is done for a specific client, for a specific purpose, under agreed terms. It has no standard statutory report format. The scope is set by the engagement letter, so the report covers only what was agreed. It is often forward-looking and focuses on risks, value and deal protection rather than an opinion on true and fair view.

The process runs in stages. You first understand the deal purpose and agree scope. You then plan the work, prepare a request list or checklist and set up a team, often with legal, tax and technical experts. You collect information through a data room, management meetings, site visits and third-party checks. You analyse it, compare it with representations, and spot red flags. Finally you report.

Red flags are signs that need deeper work. Examples are unusual revenue growth, related party dealings not at arm's length, undisclosed contingent liabilities, weak controls, pending litigation, high customer concentration, tax disputes, and key-person dependence. A red flag is not proof of a problem. You follow it up, quantify the effect where possible, and report it.

The report states the scope, the basis of work, the sources relied on, the limitations, the findings and their impact, and recommendations such as price adjustment, indemnities or conditions before closing. In the exam, link every point to the case facts and the client's purpose.

Key rules to remember

Core flow of due diligence: Scope → Planning → Information gathering → Analysis → Red flags → Quantification → Report; Use this sequence as the skeleton of any descriptive answer.
Common types by area: Financial, Tax, Legal, Commercial, Operational, HR, IT, Environmental; Name the type that suits the case; many deals need several.
Typical report content: Purpose and scope + Basis and sources + Limitations + Findings + Impact + Recommendations; There is no fixed statutory format, so show these elements.
Treatment of a red flag: Identify → Probe → Quantify → Report → Recommend protection; Protection can be price cut, indemnity, escrow or a closing condition.

How to solve Due Diligence Process and Reporting questions

Use this method for any question on the due diligence process or report. Tie each step to the facts given.

1Read the case and note the client, the deal purpose and the target. This decides the scope and the main type of due diligence.
2State the scope and terms: engagement letter, areas covered, period, materiality and limitations.
3Describe planning: team with experts, request list or checklist, data room access, timelines and confidentiality.
4Explain information gathering: documents, management meetings, site visits, third-party confirmations and analytical review.
5Analyse the information against the seller's claims and list the red flags found in the case facts.
6Quantify the impact of each finding and say how it affects value, price or deal structure.
7Write the report points: scope, sources, limitations, findings, impact and recommendations.
8Conclude with the advice to the client: proceed, renegotiate, add protections or walk away.

Quickest way: Stage-and-flag method

When to use it: Use it when time is short or the question asks for steps or a checklist for an acquisition.

Write the seven stages as short headings in order.
Under each heading add one line linked to the case facts.
List red flags from the case in a separate short list with the impact of each.
End with two or three recommendations such as price adjustment, indemnity or closing conditions.

Common mistakes in Due Diligence Process and Reporting

Treating due diligence as a statutory audit with a true and fair opinion
Students carry over the audit report mindset.
Fix: State that it is a purpose-specific engagement with agreed scope and findings-based reporting, not a statutory opinion.
Listing generic steps without linking to the case
Students memorise a checklist and reproduce it.
Fix: Pick the steps that matter for the case facts and refer to the target, the deal and the red flags given.
Naming a red flag but not explaining its impact
Students stop at identification.
Fix: Add what it could cost or risk and the recommended action, such as indemnity or price reduction.
Ignoring scope limitations and reliance on management information
Students assume full verification is done.
Fix: State that work is limited to the agreed scope and the information provided, and mention any unverified items.
Covering only financial areas
Students link due diligence only with accounts.
Fix: Mention legal, tax, commercial, operational and HR areas where the case suggests them.

Worked examples

Example 1

Alpha Ltd plans to acquire 100% of Beta Pvt Ltd, a packaging firm. Alpha engages a CA firm for due diligence. The firm finds that 70% of Beta's revenue comes from one customer, there is a pending tax dispute not disclosed in the management information, and the promoter's relatives supply raw material at prices above market. Explain how the firm should proceed and report.

Show the solution

Purpose and scope: the client is Alpha, the purpose is acquisition. Scope is financial, tax, commercial and related party areas, set in the engagement letter.
Planning: prepare a request list, get data room access, form a team with a tax expert, and agree confidentiality and timelines.
Information gathering: examine customer contracts, tax orders and notices, related party records and purchase prices, and hold management meetings.
Red flag 1: 70% revenue from one customer is a concentration risk. Check contract term, renewal terms and the customer's standing. Impact: revenue and valuation could fall if the customer leaves.
Red flag 2: the undisclosed tax dispute is a possible contingent liability and a disclosure lapse. Quantify the exposure with the tax expert. Impact: reduce price or seek an indemnity or escrow.
Red flag 3: above-market related party purchases may inflate costs or divert value. Compare with market prices and quantify the excess. Impact: normalise earnings for valuation.
Report: state scope, sources, limitations, the findings with quantified impact and the recommendations.
Recommendations: renegotiate price, add indemnity and escrow for the tax dispute, require customer contract comfort as a closing condition, and review related party terms after acquisition.

Answer: The firm follows scope, planning, information gathering, analysis, red flags and reporting. It flags customer concentration, the undisclosed tax dispute and the related party pricing, quantifies each, and recommends price adjustment, indemnity or escrow, and closing conditions.

Example 2

A private equity fund asks you to prepare a due diligence checklist and outline the report for investing in Gamma Ltd, a manufacturing company. List the key checklist areas and the contents of the report.

Show the solution

Financial: review past financial statements, quality of earnings, working capital, debt and contingent liabilities.
Tax and legal: check tax assessments and disputes, litigation, licences, contracts and title to assets.
Commercial and operational: study customers, suppliers, market position, capacity, and key-person dependence.
Control and IT: assess internal controls, systems and data reliability.
HR and compliance: review employee liabilities, statutory compliance and any regulatory issues.
Report contents: purpose and scope, basis and sources of information, limitations, findings by area, red flags and their impact.
Report conclusion: recommendations such as valuation adjustments, conditions before closing, indemnities and post-deal actions.

Answer: The checklist covers financial, tax, legal, commercial, operational, control and IT, and HR areas. The report states scope, sources, limitations, findings with impact, and recommendations to the fund.

Exam tips

Always name the client and the purpose first. The scope and emphasis depend on them.
Show stages in order and link each to case facts. Marks go for application.
For case MCQs, remember that due diligence is not a statutory audit and its scope comes from the engagement terms.
Do not skip limitations and reliance on management information in a report answer.
End with a clear recommendation. Examiners look for a decision-oriented conclusion.

Practice questions from Due Diligence, Investigation & Forensic Accounting

Due Diligence Process and Reporting in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Due Diligence Process and Reporting: frequently asked questions

What are the main steps in a due diligence review?

Agree scope, plan, gather information, analyse it, identify red flags, quantify the impact and report. In an exam answer, link each step to the facts of the case.

Is there a fixed due diligence report format for CA Final?

No statutory format is prescribed for the report. Show the purpose and scope, sources, limitations, findings, impact and recommendations.

How is due diligence different from a statutory audit?

A statutory audit gives an opinion on financial statements under law. Due diligence serves a specific client and purpose, with scope agreed in the engagement, and focuses on findings and risks for a decision.

What are common red flags in an acquisition due diligence?

Examples are customer concentration, undisclosed liabilities, unusual related party dealings, weak controls, aggressive revenue growth and pending disputes. Always state the impact and the action you recommend.