Advanced Auditing, Assurance and Professional Ethics · Special Features of Audit of Banks & Non-Banking Financial Companies

Bank Audit: Special Features and Statutory Framework (CA Final Audit)

Updated 5 October 2026

Bank audit is the statutory audit of a bank's financial statements under the Banking Regulation Act, 1949, the RBI Act, 1934 and the governing Act of the bank, with extra duties such as the long form audit report. To answer questions, identify the bank type, who appoints the auditor, the report required, and apply provision, facts, conclusion.

Understand Bank Audit: Special Features and Statutory Framework

A bank handles public deposits, so the law gives it a tighter regulatory framework than an ordinary company. Banks are regulated by the Reserve Bank of India (RBI). The auditor therefore serves shareholders, and also supports the regulator and depositors.

The main framework is the Banking Regulation Act, 1949 (applies to banking companies, with modifications for others such as nationalised banks and SBI under their own Acts), the RBI Act, 1934, and the Companies Act, 2013 where not in conflict. Public sector banks are also governed by their own statutes. The form of the balance sheet and profit and loss account is prescribed in the Third Schedule to the BR Act. RBI directions on income recognition, asset classification and provisioning also apply.

Bank audit has special features. Operations are spread over many branches, volumes are very large, and much of the work is computerised (core banking). Internal controls are heavy and there is a high risk of fraud. Advances and NPA classification are the most judgmental areas. Auditors also report on matters beyond the true and fair view.

The audit is done in two layers. Branch auditors audit individual branches. For nationalised banks, branch auditors are appointed by the bank's management in consultation with the SCAs, as per RBI guidelines. The SCAs are consulted; they do not make the appointment. In SBI, branch auditors are appointed under the SBI Act and the bank's own procedure, with the RBI guidance that applies to it. Statutory Central Auditors (SCAs) audit the bank as a whole, consolidate branch work, and sign the main report.

The route of SCA appointment depends on the type of bank:

Nationalised banks: the bank (through its Board) appoints the SCAs in consultation with the RBI, as per RBI guidelines and the Nationalisation Acts and the Scheme made under them.
Private sector banks: the shareholders appoint the auditors at the AGM under the Companies Act. In addition, RBI's prior approval is needed for the appointment, reappointment and removal of auditors of banking companies under Section 30(1A) of the BR Act.
SBI: the auditors are appointed by the Central Government on the recommendation of the RBI, under Section 41 of the SBI Act, 1955.

RBI has also issued guidelines on appointment of SCAs, covering eligibility, tenure, and independence, which you should know by theme.

The Long Form Audit Report (LFAR) is a detailed report required by RBI in addition to the audit report. It is submitted to the bank's Board of Directors/management as per RBI directions. It covers areas such as advances, NPAs, internal controls, and compliance. Branch auditors also complete a branch-level LFAR, and the SCA submits one on the bank as a whole. It does not replace the audit report on financial statements.

Key rules to remember

Legal framework: Bank audit = BR Act, 1949 + RBI Act, 1934 + the bank's own Act + Companies Act, 2013 (where not inconsistent) + RBI directions; Name all sources when asked for the statutory framework.
Two-tier audit: Branch auditors audit branches; Statutory Central Auditors audit the whole bank and sign the main report; SCA relies on branch auditors' reports and uses own judgment on the consolidated position.
Format of accounts: Balance sheet and profit and loss account follow the Third Schedule to the BR Act, 1949; Banks do not follow Schedule III of the Companies Act for presentation.
Reports in a bank audit: Audit report on financial statements + Long Form Audit Report (to the Board of Directors/management, as per RBI directions); LFAR is a separate, detailed regulatory report required by RBI.
Answer structure: Provision → Facts → Conclusion; Use it for every case-based answer.

How to solve Bank Audit: Special Features and Statutory Framework questions

Use this sequence for any question on bank audit features, appointment or reporting.

1Identify the type of bank: public sector, private sector, co-operative, or other. This decides the governing Act and appointing authority.
2Identify the role in the question: SCA, branch auditor, or the bank's management.
3State the relevant provision in plain words: BR Act, RBI Act, RBI guidelines, or the bank's own Act.
4Apply it to the facts given, such as number of branches, tenure, or a missing report.
5Name the report involved: audit report, LFAR, or reports from branch auditors.
6Conclude clearly, for example whether the appointment is valid or what the auditor must do.
7If the question asks for features, list them with one line of explanation each.

Quickest way: Who, what, which report

When to use it: For MCQs and short case questions where time is under two minutes.

Who is the auditor: SCA or branch auditor?
What is the question about: appointment, scope, or reporting?
Which report: audit report or LFAR?
Eliminate options that apply the Companies Act alone, ignoring RBI and the BR Act.
Pick the option that fits the two-tier structure.

Common mistakes in Bank Audit: Special Features and Statutory Framework

Treating bank audit like a company audit under the Companies Act only.
Students are used to Schedule III and Section 139 logic.
Fix: Always add the BR Act, RBI Act, RBI directions and the bank's own Act, and mention the Third Schedule format.
Confusing SCA and branch auditor roles.
Both are called bank auditors.
Fix: SCA audits the bank as a whole and signs the main report; branch auditors report on their branches.
Saying the LFAR replaces the audit report.
Both are reports on the same audit.
Fix: LFAR is an additional, detailed report to the Board of Directors/management as per RBI directions. The audit report on financial statements is still needed.
Stating specific appointment limits or tenure from memory without being sure.
RBI guidelines are revised from time to time.
Fix: Use the theme (eligibility, independence, tenure limits) and quote figures only from the latest study material.
Ignoring the regulator in the answer.
Students focus only on the true and fair view.
Fix: State the RBI's role by bank type: prior RBI approval is needed for the appointment, reappointment and removal of auditors of banking companies (Section 30(1A) of the BR Act), RBI recommends SBI's auditors to the Central Government, and for nationalised banks the bank appoints SCAs in consultation with the RBI, as per RBI guidelines. RBI also prescribes reporting such as the LFAR.

Worked examples

Example 1

A nationalised bank has 2,000 branches. The audit committee proposes that the SCA should personally audit every branch to avoid relying on others. Advise on the audit structure.

Show the solution

Provision: Bank audit is two-tier. Branch auditors audit branches, and the SCA audits the bank as a whole.
Facts: With 2,000 branches, it is not practical for the SCA to visit all branches. Branch auditors are appointed for this purpose.
SCA's role: The SCA relies on branch auditors' reports, selects important branches for own work, and applies own judgment on the consolidated accounts.
Conclusion: The proposal is not required or practical. The SCA need not audit every branch, but remains responsible for the opinion on the bank's financial statements.

Answer: The SCA does not have to audit all branches. Branch auditors cover branches and the SCA consolidates their work and signs the main report.

Example 2

After finishing the audit of a bank, the SCA issues the audit report and says no further report is needed because the opinion is unmodified. The bank's Board asks about the LFAR. Is the SCA right?

Show the solution

Provision: RBI directions require the auditor to submit an LFAR to the bank's Board/management in addition to the audit report on financial statements.
Purpose: The LFAR gives a detailed assessment of areas such as advances, NPAs, internal controls and compliance.
Facts: An unmodified audit opinion does not remove this requirement, as the two reports serve different purposes.
Conclusion: The SCA is wrong. The LFAR must be submitted as required by RBI directions, in addition to the audit report.

Answer: The SCA is not right. The LFAR is a separate requirement under RBI directions and must be submitted to the Board/management in addition to the audit report.

Exam tips

For appointment questions, always bring RBI in and state the route by bank type: nationalised banks, private banks or SBI.
Use the provision-facts-conclusion layout and keep each answer to a few lines per part.
In case MCQs, check whether the question is about the SCA or a branch auditor before reading the options.
Do not quote tenure or eligibility numbers unless you are sure of the current RBI guideline.
List special features as short bullets: regulator, branch network, IT dependence, advances risk, additional reports.

Practice questions from Special Features of Audit of Banks & Non-Banking Financial Companies

Bank Audit: Special Features and Statutory Framework: frequently asked questions

What are the special features of a bank audit?

Banks work under the BR Act, the RBI Act and RBI directions. They have large branch networks, heavy IT use and high-risk areas like advances. Auditors also give additional reports such as the LFAR.

What is the difference between statutory central audit and branch audit?

Branch auditors audit individual branches and report on them. The Statutory Central Auditors audit the bank as a whole, use the branch reports, and give the main audit report.

What is the LFAR in bank audit?

The Long Form Audit Report is a detailed report required by RBI. It is submitted to the bank's Board of Directors/management as per RBI directions. It covers areas such as advances, NPAs and internal controls, and is given in addition to the audit report on financial statements.

Who appoints the auditors of a bank?

It depends on the type of bank. Nationalised banks appoint SCAs (through the Board) in consultation with the RBI, as per RBI guidelines and the Nationalisation Acts and Scheme. In private banks the shareholders appoint auditors at the AGM, but RBI's prior approval is needed for appointment, reappointment and removal of auditors under Section 30(1A) of the BR Act. For SBI, the Central Government appoints the auditors on the recommendation of the RBI under the SBI Act, 1955. Always check the bank type first.