Integrated Business Solutions (Multidisciplinary Case Study with Strategic Management) · Advanced Auditing, Assurance and Professional Ethics

Company Audit and Special Audit Areas for CA Final

Updated 5 October 2026

Company audit is the audit of a company's financial statements under the Companies Act 2013, Standards on Auditing and CARO. To solve a question, identify the issue, state the provision, apply it to the facts, and conclude with the report impact: appointment validity, CARO clause, IFC opinion, or reliance on another auditor or expert.

Understand Company Audit and Special Audit Areas

A company auditor works under two layers of rules. The Companies Act 2013 decides who can be auditor, how the auditor is appointed, removed, paid, and what powers and duties the auditor has. The Standards on Auditing (SAs) decide how you perform the audit and report.

The auditor must be a chartered accountant or a firm, and must be independent. Among the disqualifications, a body corporate (other than an LLP), an officer or employee of the company, and a partner or employee of such an officer or employee cannot be appointed. Under Section 141(3)(g), the limit is 20 company audits per person. For a firm, the limit applies to each partner who is not in full-time employment elsewhere, in line with Section 141(3)(g). One person companies, dormant companies, small companies and private companies with paid-up share capital below ₹100 crore are left out of the count. The first auditor is appointed by the Board. After that, members appoint the auditor at the AGM for a term. Removal before term, and resignation, follow a defined process, usually with approval of members or the Central Government and with the auditor getting a chance to be heard. Know the process, not just the outcome.

The auditor has the right to access books, records and vouchers, to get information and explanations from officers, and to attend general meetings. The duties include reporting on whether the financial statements give a true and fair view, and on matters the Act requires, such as books of account, going concern effect, and internal financial controls over financial reporting.

In the audit report, a Material Uncertainty Related to Going Concern section comes after the Basis for Opinion and before the KAMs. Where relevant, Emphasis of Matter and Other Matter paragraphs are added as SA 706 requires. They do not change the opinion.

CARO 2020 is an order issued under Section 143(11) of the Act. It requires the auditor to report on specified matters in an annexure to the audit report. Think of it as a checklist of areas where the law wants a direct statement: property, plant and equipment, inventory, loans and investments, statutory dues, borrowings, fraud, related parties, internal audit, and others. For each clause, you state the facts found, and report adverse findings clearly. Know that CARO applies to companies unless exempted. The exempted classes include banking companies, insurance companies, Section 8 companies, one person companies, small companies and certain small private companies. Check the exact exemption conditions in your study material.

Internal financial controls (IFC) reporting is required under Section 143(3)(i). It asks whether the company has adequate IFC over financial reporting and whether they operated effectively. The opinion is given in a separate annexure, and the ICAI Guidance Note on audit of IFC guides how you form it. A material weakness leads to a modified IFC opinion.

In group audits, the group engagement partner is responsible for the group opinion even when component auditors audit parts. SA 600 (Revised) requires you to understand the component auditors, direct and supervise them, and evaluate their work. SA 600 (Revised) restricts references to a component auditor in the group auditor's report unless law or regulation requires it. In India, the principal auditor must deal with the reports of other auditors as required by the Companies Act and the rules under it. Where a reference is made, it should explain that the group engagement partner remains responsible for the group opinion. Check the exact section, rule, paragraph placement and wording in the Act and the SAs before you cite them. SA 620 deals with an auditor's expert. Using an expert never reduces your responsibility for the opinion.

Key rules to remember

Auditor appointment path: First auditor: Board. Later auditors: members at the AGM. Section 139(8): a casual vacancy in a company other than a Government company is filled by the Board within 30 days. If the vacancy is caused by resignation, the Board's appointment needs approval of the company in general meeting within three months of the Board's recommendation. In a C&AG-audited company, the C&AG fills a casual vacancy; the Board may do so if the C&AG does not act within 30 days.; Check the exact timelines and approval requirements in the Act text before writing the answer.
Auditor's report structure: Opinion → Basis for opinion → Material uncertainty related to going concern (where applicable) → KAMs (where applicable) → Emphasis of Matter / Other Matter paragraphs (where relevant) → Other information → Responsibilities → Report on other legal and regulatory requirements; CARO annexure and IFC annexure are reported under the other legal and regulatory requirements. Place Emphasis of Matter and Other Matter paragraphs as SA 706 requires.
CARO answer pattern: Clause → Facts found → Compliance or default → Reporting wording; Report adverse findings and qualifying remarks; do not write a bare 'yes' without fact basis.
IFC opinion: Adequate IFC exist + operating effectively at the balance sheet date → unmodified opinion; material weakness → modified opinion; IFC covers financial reporting controls, not every operating control.
Group audit responsibility: Group engagement partner responsible for direction, supervision and performance of group audit and for the opinion; SA 600 (Revised) restricts a reference to a component auditor unless law or regulation requires it. In India, the principal auditor must deal with other auditors' reports under the Companies Act and the rules. The reference should explain that you remain responsible for the group opinion. Do not treat the paragraph placement or wording as fixed without checking the SAs and the Act.
Use of expert: Evaluate competence, capabilities and objectivity of the auditor's expert; evaluate the work as audit evidence; Sole responsibility for the opinion stays with the auditor.

How to solve Company Audit and Special Audit Areas questions

Use this method for any case-based or written question on company audit, CARO, IFC, group audits or experts.

1Identify the area being tested: appointment/removal, powers/duties, CARO, IFC, group audit, other auditor, or expert.
2List the key facts: company type, size, dates, amounts, who did what.
3State the rule in plain words with the exact condition, such as who appoints and by when.
4Apply the rule to each fact. Say whether each condition is met or breached.
5For CARO or IFC, decide the effect on reporting: compliance, adverse comment, qualification or modified opinion.
6For group or expert issues, state what the principal auditor must do, such as evaluating competence and work, and who remains responsible.
7Conclude clearly in one line: valid or invalid, report or not report, modify or not modify.
8Write in provision-facts-conclusion form so each part earns marks.

Quickest way: Rule-Fact-Verdict in three lines

When to use it: Use for case-scenario MCQs and short written parts when you have under four minutes.

Underline the trigger word in the case: appointment, removal, loan, default, weakness, component, expert.
Match it to one rule and recall its single decisive condition.
Check the facts against that condition and pick the option or conclusion that follows.
For MCQs, eliminate options that shift responsibility away from the auditor or ignore a stated fact.
For written answers, write one line each for provision, facts and conclusion.

Common mistakes in Company Audit and Special Audit Areas

Treating CARO as part of the main opinion.
Both are in the audit report and look connected.
Fix: Remember CARO is a statutory annexure under the other legal and regulatory requirements. A CARO finding does not automatically modify the opinion, unless it affects the true and fair view.
Giving an IFC opinion on all internal controls of the company.
The word 'internal controls' sounds broad.
Fix: State that IFC reporting is limited to controls over financial reporting, as required by the Act and the Guidance Note.
Saying the group auditor can name the component auditor to reduce responsibility.
Students confuse older practice with current SA 600 (Revised).
Fix: Write that the group engagement partner remains responsible for the group opinion and must evaluate the component auditor's work.
Stating appointment and removal steps in the wrong order or skipping the auditor's right to be heard.
Students memorise outcomes, not the process.
Fix: Write the steps as a sequence: board action, member approval, notice, auditor's representation, and filing where applicable. Verify details in the Act text.
Writing 'yes' or 'no' for CARO clauses without facts.
CARO looks like a checklist.
Fix: Quote the fact that triggered the comment, such as an overdue loan or an undisputed statutory due, then give the reporting conclusion.
Assuming that relying on an expert shifts liability.
The expert is a specialist, so the work feels outsourced.
Fix: State that the auditor evaluates the expert's competence, capabilities, objectivity and the work, and keeps sole responsibility for the opinion.

Worked examples

Example 1

Case: You are the engagement partner for Alpha Ltd, a listed company. A component auditor audits its main subsidiary, Beta Ltd, which contributes a large share of group revenue. The component auditor sends a clean report. You plan to rely on it and mention in your report that the audit of Beta was done by another auditor, so you are not responsible for that part. Is this acceptable?

Show the solution

Provision: Under SA 600 (Revised), the group engagement partner is responsible for the direction, supervision and performance of the group audit and for the opinion on the group financial statements.
Facts: Beta is significant, and a component auditor has issued a clean report. You intend to mention the other auditor and to disclaim responsibility for that part.
Application: You must obtain an understanding of the component auditor, including independence and competence, and evaluate the work performed. The group report does not divide responsibility.
Application: SA 600 (Revised) restricts a reference to the component auditor unless law or regulation requires it. In India, the Companies Act and the rules require the principal auditor to deal with other auditors' reports. So a reference to Beta's auditor can be made where that requirement applies. Check the exact provision and wording in the Act and SAs.
Application: Any such reference should make clear that you remain responsible for the group opinion. Disclaiming responsibility for Beta's part is therefore not allowed.
Conclusion: A reference to the other auditor may be made where law requires it. Disclaiming responsibility for that part is not acceptable.

Answer: Partly acceptable. A reference to the component auditor is restricted by SA 600 (Revised) unless law or regulation requires it, and in India the Companies Act and rules require the principal auditor to deal with other auditors' reports. But you cannot disclaim responsibility. As group engagement partner you remain responsible for the group opinion. You must evaluate the component auditor's competence and work, and direct and supervise it.

Exam tips

In case-scenario MCQs, find the one fact that changes the answer, such as company type, a date, or who bears responsibility.
For CARO, learn the clause themes, not just numbers. Under pressure, naming the theme with the right conclusion earns marks.
In Paper 6, link a CARO or IFC finding to related areas such as financial reporting, taxation or corporate law. Say the effect on the report and the effect on the financial statements.
Always end with a one-line conclusion. Examiners reward a clear verdict after provision and facts.
Avoid quoting section numbers or limits unless you are certain. State the rule in words and check the Act text while revising.

Practice questions from Advanced Auditing, Assurance and Professional Ethics

Company Audit and Special Audit Areas: frequently asked questions

What are the most important CARO 2020 areas to prepare?

Focus on property, plant and equipment, inventory, loans and investments, statutory dues, borrowings, fraud reporting, related party transactions and internal audit. These themes often form case scenarios. Learn what triggers an adverse comment in each.

How do I report on internal financial controls?

You give an opinion in a separate annexure on whether adequate IFC over financial reporting exist and operated effectively. If you find a material weakness, you modify the IFC opinion and explain the basis. Base your work on the ICAI Guidance Note.

Can I rely on another auditor's work in a group audit?

Yes, but only after you understand the component auditor and evaluate the work. SA 600 (Revised) restricts references to the component auditor unless law or regulation requires it, and in India you must deal with other auditors' reports as the Companies Act and rules require. The group engagement partner stays responsible for the group opinion. You cannot pass that responsibility to the component auditor.

Does using an auditor's expert reduce my responsibility?

No. You must evaluate the expert's competence, capabilities and objectivity, and assess whether the work is adequate as audit evidence. The responsibility for the opinion remains with you.