Cost and Management Audit · Audit of Different Service Organisations

Audit of Banking, Insurance and Financial Services

Updated 11 October 2026 · Fact-checked

Auditing a bank, insurer or other financial service provider means testing its controls, risks and costs, not stock or production. You identify the service lines, map the key risks, test controls and compliance, check cost and profitability by product, and report findings with a clear recommendation to management.

Understand Audit of Banking, Insurance and Financial Services

Financial service providers sell money-based services: loans, deposits, insurance cover, payments, broking and asset management. They hold no factory output. Their "product" is a promise, a transaction or a risk taken on. So the audit looks at transactions, controls, compliance and the cost of delivering each service.

Banks earn mainly from the gap between interest earned on loans and interest paid on deposits, plus fees. The main audit concerns are credit quality (loan appraisal, sanction, monitoring, recognising bad loans), treasury and investment operations, cash and deposit handling, branch controls, and compliance with the Reserve Bank of India's directions. Cost focus: cost of funds, cost per account or transaction, branch profitability.

Insurance companies collect premiums now and pay claims later. Their main concerns are underwriting (are risks priced and accepted properly), claims (are payments valid and timely), reserving for claims not yet settled, reinsurance, agent and intermediary commission, and compliance with IRDAI rules. Cost focus: claims ratio, expense of management, commission and acquisition cost per policy.

Other financial services (NBFCs, broking, mutual fund and payment firms) have a mix of these. Credit risk, customer money handling, KYC and anti-money-laundering checks, and technology reliability matter most.

Common to all three: heavy dependence on IT systems, high transaction volumes, strict regulation and fraud risk. That is why the audit is risk-based and control-driven. An operational audit here asks whether each process is efficient, economical and effective, and whether costs are allocated fairly across products. The cost auditor or management auditor adds value by costing services, finding leakage and recommending improvements.

Key rules to remember

Net interest margin (bank): Net interest margin = (Interest earned − Interest expended) ÷ Average earning assets; Shows how well the bank earns on its lending and investing. Use average assets for the period.
Cost-to-income ratio: Cost-to-income ratio = Operating expenses ÷ Operating income × 100; A lower ratio signals better efficiency. Compare across branches or periods.
Claims ratio (insurer): Claims ratio = Claims incurred ÷ Net premium earned × 100; Measures underwriting quality. A rising ratio signals underpricing or weak claims control.
Expense ratio (insurer): Expense ratio = (Commission + Operating expenses of management) ÷ Net premium × 100; Shows the cost of acquiring and servicing business.
Combined ratio: Combined ratio = Claims ratio + Expense ratio; Above 100% means an underwriting loss before investment income.
Cost per transaction: Cost per transaction = Total cost of the service ÷ Number of transactions; Basic service costing unit for branches, channels or claims processing.

How to solve Audit of Banking, Insurance and Financial Services questions

Use this method for any question on auditing a bank, insurer or financial service firm.

1Identify the entity type and its main service lines (lending, deposits, underwriting, claims, broking). Say so in one line.
2List the key risks for that entity: credit, liquidity, operational, fraud, compliance, IT and, for insurers, underwriting and reserving.
3Match each risk to a control and an audit procedure, such as sampling loan files, re-performing claim approvals or testing system access.
4Check regulatory compliance with the relevant regulator's requirements, KYC and anti-money-laundering obligations, without quoting sections you are unsure of.
5Cover the cost aspects: identify cost drivers, allocate costs to products or branches, and compute relevant ratios or unit costs.
6Evaluate efficiency, economy and effectiveness using the ratios or benchmarks you computed.
7Conclude with findings, their impact and specific recommendations, then state the follow-up action.

Quickest way: Risk-Control-Cost (RCC) scan

When to use it: When time is short in a descriptive question asking for audit focus or approach for a financial services entity.

Write the entity type and its main service in one line.
List three to four risks as bullets, tailored to that entity.
Against each risk, write one control and one audit test in a single line.
Add one line on cost: the main cost driver and one ratio to compute.
Close with two recommendations.

Common mistakes in Audit of Banking, Insurance and Financial Services

Applying manufacturing audit ideas such as stock verification and material usage to a bank or insurer.
Most of the cost audit syllabus is built on manufacturing examples, so students default to them.
Fix: Think transactions, controls and services. Replace stock with loan files, claims files and system logs.
Treating bank audit and insurance audit as the same.
Both are financial entities and look alike on the surface.
Fix: For banks stress credit risk, interest margin and treasury. For insurers stress underwriting, claims, reserves, reinsurance and commission.
Listing risks but giving no audit procedure or control.
Students recall risk lists from notes and stop there.
Fix: Pair every risk with a control and a test. Marks are given for application.
Ignoring cost aspects and writing only compliance points.
Students forget that this paper is for cost and management auditors.
Fix: Always add cost drivers, unit costs, product or branch profitability and one efficiency ratio.
Misreading the combined ratio, or adding investment income into it.
Students mix underwriting results with total profit.
Fix: Combined ratio is claims ratio plus expense ratio only. A value above 100% means an underwriting loss; investment income is separate.
Finishing without a recommendation.
Students run out of time or treat the answer as a description.
Fix: Keep the last two minutes for findings and recommended actions.

Worked examples

Example 1

An insurer's net premium earned for the year is ₹500 crore. Claims incurred are ₹350 crore, commission is ₹40 crore and operating expenses of management are ₹60 crore. Compute the claims ratio, expense ratio and combined ratio, and state what the audit should focus on.

Show the solution

Claims ratio = 350 ÷ 500 × 100 = 70%.
Expense ratio = (40 + 60) ÷ 500 × 100 = 20%.
Combined ratio = 70% + 20% = 90%.
A combined ratio below 100% means an underwriting profit before investment income.
Audit focus: test claims approval and reserving for adequacy, review commission against agreed rates, and compare the ratios with prior periods and with each product line.

Answer: Claims ratio 70%, expense ratio 20%, combined ratio 90%. The insurer shows an underwriting profit, but the audit should still test claims and reserves, commission and product-wise ratios.

Example 2

A bank branch has operating expenses of ₹2,40,00,000 and operating income of ₹6,00,00,000. It processed 4,00,000 transactions in the year. Compute the cost-to-income ratio and cost per transaction, and list three audit areas for an operational audit of the branch.

Show the solution

Cost-to-income ratio = 2,40,00,000 ÷ 6,00,00,000 × 100 = 40%.
Cost per transaction = 2,40,00,000 ÷ 4,00,000 = ₹60.
Audit area 1: loan appraisal, sanction and monitoring, as credit risk drives income quality.
Audit area 2: cash handling, dual control and system access, to limit fraud and operational risk.
Audit area 3: cost allocation and transaction cost against peer branches to find inefficiency.

Answer: Cost-to-income ratio is 40% and cost per transaction is ₹60. Key audit areas are credit processes, cash and access controls, and branch cost efficiency against benchmarks.

Exam tips

Open every answer with the entity type and its main service line. It shows you have read the question.
Pair every risk with a control and an audit test. Lists of risks alone score poorly.
Learn the claims, expense and combined ratios and the cost-to-income ratio. They are easy numerical marks.
For comparison questions, use a short two-column style in bullets: banks versus insurers on risk, income source, key ratio and regulator.
Always finish with specific recommendations. Section A MCQs usually test ratios and which risk belongs to which entity.

Practice questions from Audit of Different Service Organisations

Audit of Banking, Insurance and Financial Services in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Audit of Banking, Insurance and Financial Services: frequently asked questions

What is the difference between bank audit and insurance audit?

A bank audit centres on credit risk, deposits, treasury and interest margins. An insurance audit centres on underwriting, claims, reserves, reinsurance and commissions. Both depend heavily on IT controls and regulatory compliance.

What does an operational audit of financial services check?

It checks whether processes such as loan processing, claims settlement or account opening are efficient, economical and effective. It also reviews controls, cost per unit of service and whether objectives are met.

Does the cost auditor have a role in banks and insurers?

For this paper, treat the role as analysing service costs, allocating costs to products or branches, finding leakage and recommending improvements. Do not assume a statutory cost audit applies unless the question states it.

Which ratios should I remember for this topic?

Remember net interest margin and cost-to-income ratio for banks, and claims, expense and combined ratios for insurers. Also remember cost per transaction as a general service costing measure.