Advanced Auditing, Assurance and Professional Ethics · Specialised Areas

Audit of Insurance Companies for CA Final

Updated 5 October 2026 · Fact-checked

An insurance company audit tests whether premium, claims, investments and policy liabilities are fairly stated under the Insurance Act, 1938, IRDAI rules and the Companies Act. You solve questions by naming the risk, the regulatory source, the audit procedure and the conclusion, relying on the actuary only for policy liabilities.

Understand Audit of Insurance Companies

An insurance company collects premium today and promises to pay claims later. So its biggest numbers are not cash sales. They are estimates of future obligations. This is why the audit looks different from that of a trading company.

The company is regulated by the IRDAI (Insurance Regulatory and Development Authority of India). Financial statements are prepared under the Insurance Act, 1938, the IRDA Act, 1999 and the IRDAI regulations on preparation of financial statements and auditor's report. These set the formats and accounting rules. The Companies Act applies where the insurance laws are silent. Insurers have their own prescribed formats for the revenue account, profit and loss account and balance sheet. Do not assume the Schedule III format applies to an insurer. Also check what the current IRDAI regulations say about Ind AS applicability, as insurers have a separate transition path.

The main audit areas are these:

Premium: completeness and correct recognition, including cut-off, premium received in advance, reinsurance ceded and premium deficiency.
Claims: whether claims are genuine, approved by authorised persons, correctly booked, and whether claims outstanding (including incurred but not reported) are adequately provided.
Policy liabilities and reserves: unearned premium reserve, claims reserves and, for life insurers, the actuarial valuation of liabilities. These depend on the appointed actuary.
Investments: compliance with IRDAI investment norms, valuation, custody and income recognition.
Reinsurance: treaty terms, recoveries, balance confirmations with reinsurers.

The auditor does not replace the actuary. The auditor treats the actuary as an expert, evaluates competence, objectivity and the data and assumptions used, and still takes responsibility for the opinion. Under the SAs, the auditor also treats the heavy IT systems of an insurer as a key risk, since policy administration, billing and claims systems process very large volumes. Reasoning like this lets you answer even an unseen question.

Key rules to remember

Net claims incurred: Claims paid + Closing outstanding claims − Opening outstanding claims (adjusted for reinsurance); Use this to test whether the claims expense in the revenue account agrees with the movement in claims liability.
Net premium earned (general insurance, basic logic): Premium written − Reinsurance ceded + Opening unearned premium reserve − Closing unearned premium reserve; Used for reasonableness testing of premium income. Treat it as an analytical check, not the statutory format.
Reliance on expert: Evaluate competence, capabilities and objectivity → understand the expert's work → evaluate appropriateness as audit evidence (SA 620); The appointed actuary's valuation is used this way. Reliance does not reduce the auditor's responsibility for the opinion.
Audit answer structure: Risk → Regulation → Procedure → Conclusion; Use this order for any descriptive question on insurer audit.

How to solve Audit of Insurance Companies questions

Use the same sequence for any question on insurer audit, whether it is about premium, claims or reserves.

1Identify the type of insurer (life, general, health, reinsurer) and the area asked: premium, claims, reserves, investments or reporting.
2State the governing framework in one line: Insurance Act, 1938, IRDA Act, 1999, IRDAI financial statement regulations, and the Companies Act where applicable.
3Name the key risk in that area, for example understatement of outstanding claims, premium cut-off error or weak IT controls.
4List specific audit procedures: tests of controls, vouching, confirmations, recomputation and analytical review.
5Where an estimate is involved, say how you evaluate management's method and the actuary's work as an expert, with SA 540 and SA 620 logic.
6Link findings to reporting: adjust, disclose, or modify the opinion if a material misstatement or limitation remains.
7Close with a one-line conclusion tied to the facts given in the case.

Quickest way: Area-Risk-Test shortcut

When to use it: Use it when you have under ten minutes for a 5 to 6 mark descriptive question or a quick case MCQ.

Write the area in the first line (premium, claims, reserves, investments).
Write the one main risk next to it.
Write three procedures: one control test, one substantive check, one analytical or external confirmation.
Add one sentence on regulatory compliance with IRDAI and the actuary's role where reserves are involved.
End with the reporting consequence if the issue is unresolved.

Common mistakes in Audit of Insurance Companies

Applying Schedule III formats to an insurer's financial statements.
Students are used to company audit and assume one format fits all.
Fix: State that insurers follow the formats prescribed by IRDAI regulations, with the Companies Act applying only where the insurance laws are silent.
Saying the auditor calculates policy liabilities independently.
Students forget that actuarial valuation is specialist work.
Fix: Write that the appointed actuary values the liabilities and the auditor relies on this as expert evidence after evaluating competence, data and assumptions.
Treating premium as simple sales and checking only receipts.
Revenue audit habits carry over from other industries.
Fix: Cover cut-off, premium received in advance, unearned premium, reinsurance ceded and premium deficiency.
Checking only claims paid and ignoring outstanding and unreported claims.
Paid claims are easy to vouch, estimates are harder.
Fix: Always test claims outstanding, including IBNR, using subsequent settlements, surveyor reports and past experience.
Giving a list of procedures with no conclusion or reporting link.
Students run out of time and stop after procedures.
Fix: End every answer with the effect on the audit report: no change, emphasis, or modified opinion.
Ignoring IT systems and investment compliance.
Students focus only on premium and claims.
Fix: Add a line on IT general and application controls and on investment norms, custody and valuation.

Worked examples

Example 1

You are auditing a general insurer. During testing of claims, you find that many claims settled in the first month after year end relate to losses that occurred before year end, but they are not included in closing outstanding claims. Explain the audit approach and the reporting effect.

Show the solution

Risk: outstanding claims liability may be understated, so claims expense and profit are misstated.
Procedure: obtain the list of claims settled or intimated after year end and match the date of loss to the reporting period.
Compare the amounts with the closing outstanding claims provision and compute the shortfall, including whether the shortfall is a one-off or a pattern.
Review surveyor reports, claim files and past experience to test the estimates and the method used for unreported claims.
Discuss with management and, where relevant, the actuary, and ask for adjustment of the provision.
Evaluate the misstatement against materiality under SA 450 and communicate it to those charged with governance.

Answer: The auditor treats this as understatement of outstanding claims. The case gives no amounts, so the shortfall is not quantified here. In practice you compute it from the post year-end settlements and compare it with materiality. The auditor requests an adjustment. If management refuses, the opinion depends on materiality and pervasiveness. If the shortfall is material but not pervasive, the auditor expresses a qualified opinion. If it is material and pervasive, the auditor expresses an adverse opinion. If it is not material, no modification is needed, but the auditor still communicates the misstatement.

Example 2

An life insurer's policy liabilities are certified by its appointed actuary. The audit senior says the audit team need not do anything further on these liabilities. Do you agree?

Show the solution

Identify the nature of the item: policy liabilities are a significant accounting estimate with high estimation uncertainty.
State that the actuary is a management's expert whose work the auditor may use as evidence under SA 620.
The auditor must evaluate the actuary's competence, capabilities and objectivity, and understand the nature of the work.
Test the policy data given to the actuary for completeness and accuracy, and review the key assumptions and methods for reasonableness against IRDAI requirements.
Evaluate whether the actuary's findings are appropriate as audit evidence for the related assertions.
Conclude that the auditor retains responsibility for the opinion. In an unmodified report, the auditor does not refer to the expert's work unless law or regulation requires it. If such a reference is made, the report states that it does not reduce the auditor's responsibility for the opinion. In a modified report, the auditor may refer to the expert's work where it is relevant to understanding the modification, and the report states the same.

Answer: No, I do not agree. The auditor may rely on the actuary but must still evaluate the actuary's competence and objectivity, test the data and assumptions, and assess the work as audit evidence. Reliance does not shift responsibility for the audit opinion.

Exam tips

Begin every answer with the regulatory framework in one line, since IRDAI-specific points score marks that a general company audit answer misses.
In case scenarios, find the one fact that signals the risk, such as missing IBNR, late cut-off or unreviewed actuary data, and build the answer around it.
For reserves, always mention the actuary as an expert and the auditor's retained responsibility.
Use the provision-facts-conclusion structure and finish with the reporting effect.
MCQs have no negative marking, so attempt every one and eliminate options that treat the actuary's work as replacing the audit.

Practice questions from Specialised Areas

Audit of Insurance Companies in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Audit of Insurance Companies: frequently asked questions

Which laws govern the audit of an insurance company?

The Insurance Act, 1938, the IRDA Act, 1999 and the IRDAI regulations on financial statements and auditor's report govern it. The Companies Act applies where the insurance laws are silent. You should confirm the current IRDAI regulations when preparing.

Can the auditor rely on the appointed actuary for policy liabilities?

Yes, the auditor can use the actuary's work as expert evidence. The auditor must first evaluate the actuary's competence, capabilities and objectivity and test the data and assumptions. Responsibility for the opinion stays with the auditor.

What are the key risks in premium audit?

The main risks are incomplete recording, wrong cut-off, wrong treatment of premium received in advance and errors in reinsurance ceded. You also need to consider unearned premium reserve and premium deficiency. Strong IT controls are central, since volumes are very high.

How do I audit insurance claims in an exam answer?

Cover claims paid, claims outstanding and unreported claims. Test approval of claims, survey reports, policy validity and subsequent settlements. Then link any shortfall to the adjustment or the audit report.