Compliance Management, Audit and Due Diligence · Audit Engagement

Auditor's Rights, Duties and Engagement Documentation

Updated 11 October 2026 · Fact-checked

An auditor has a right of access to books, records and officers, and a duty to report on the accounts, report fraud, and document the work. Working papers are the record of procedures, evidence and conclusions. In exams, state the right or duty, apply it to the facts, then conclude.

Understand Auditor's Rights, Duties and Engagement Documentation

An audit works only if the auditor can see the records and question the people who prepared them. So the law gives the auditor rights. In return it puts duties on the auditor: to form an opinion, report honestly, and report fraud.

The audit engagement letter sets these out in practice. Under SA 210, the management's responsibilities in the sample letter include giving the auditor access at all times to all information, including books, accounts, vouchers and other records, whether kept at the Head Office or elsewhere. This includes books of account kept in electronic mode.

The sample letter also lists: access to the records of subsidiaries (including associate companies and joint ventures) as far as they relate to consolidation; access to reports on internal reporting of frauds, such as vigil mechanism reports; additional information the auditor requests; unrestricted access to persons within the company from whom the auditor needs audit evidence; and all the required support to discharge the auditor's duties. The auditor is entitled to require from officers such information and explanations as the auditor thinks necessary.

On duties, the letter says the auditor will request written representations from management. The report on the accounts is addressed to the shareholders for adoption at the AGM, while reports on other services go to the Board. If the auditor has reason to believe an offence involving fraud is being or has been committed against the company by its officers or employees, the auditor must report under Section 143(12). The report goes to the Board or Audit Committee first, seeking their reply or observations, and then to the Central Government. The letter states that such reporting is made in good faith and is not a breach of client confidentiality.

Documentation is the proof of all this. Working papers record the procedures performed, the evidence obtained and the conclusions reached. The letter also warns that the audit is subject to peer review or quality review, and reviewers may inspect, examine or take abstracts of working papers. So you must write working papers as if a stranger will read them.

Key rules to remember

Right of access (SA 210 sample letter): Access at all times to books, accounts, vouchers, records and electronic books, at Head Office or elsewhere; Extends to subsidiary records for consolidation, fraud reports, and persons within the company.
Right to information: Auditor may require from officers such information and explanations as the auditor thinks necessary; Quote the 'thinks necessary' wording. The auditor's judgement decides, not management's.
Fraud reporting: Reason to believe fraud offence → report to Board or Audit Committee for reply → forward to Central Government (Section 143(12)); Reporting in good faith is not a breach of confidentiality.
Addressee of report: Accounts report → shareholders (for adoption at AGM); other services → Board of Directors; Letter says form and content may change in light of audit findings.
Management representations: Auditor requests written confirmation of representations made during the audit; Includes pending litigations, foreseeable losses on long term contracts, and delays in IEPF transfers.
Working papers: Working papers = procedures + evidence + conclusions; Open to peer or quality reviewers for inspection and abstract.

How to solve Auditor's Rights, Duties and Engagement Documentation questions

Use this order for any question on auditor's rights, duties or documentation.

1Identify what is asked: a right, a duty, a reporting step or documentation.
2State the rule in plain words, using the exact conditions (for example 'reason to believe' for fraud).
3List the facts that matter: who refused access, what was withheld, what amount or fraud is involved.
4Apply the rule to each fact. Say whether the auditor was entitled or bound to act.
5Describe the practical step: written request, Board or Audit Committee reply, working paper note.
6Conclude in one clear sentence and mention documentation of the matter.

Quickest way: Right, duty, record

When to use it: Short case questions where you have about five minutes.

Write 'Right' and name the access or information involved.
Write 'Duty' and name the reporting or opinion step.
Write 'Record' and say what goes into the working papers.
Add a one-line conclusion tied to the facts.

Common mistakes in Auditor's Rights, Duties and Engagement Documentation

Saying management can decide what records the auditor sees.
Students forget that access is 'at all times' and to all relevant records.
Fix: State that access covers all relevant records, including electronic books and records kept away from the Head Office.
Reporting fraud straight to the Central Government.
Students remember only the final recipient.
Fix: Show the sequence: report to Board or Audit Committee seeking reply, then forward to the Central Government.
Treating fraud reporting as breach of confidentiality.
Confidentiality is stressed in ethics.
Fix: Say the reporting is in good faith under the Act and is not a breach or subject to suit or prosecution.
Ignoring subsidiaries and associates in the access right.
Students think only of the company's own books.
Fix: Mention access to subsidiary, associate and joint venture records as it relates to consolidation.
Calling working papers a mere checklist.
Students think of them as paperwork.
Fix: Define them as the record of procedures, evidence and conclusions, open to peer or quality review.

Worked examples

Example 1

During the audit of Sundaram Textiles Ltd, the CFO refuses to give the auditor the ledgers of its subsidiary, saying they are not the parent's books. The auditor needs them to prepare consolidation work. Advise the auditor.

Show the solution

Rule: the engagement terms give the auditor access at all times to the records of subsidiaries, including associates and joint ventures, as far as they relate to consolidation.
Facts: the ledgers are needed for consolidation, so they fall inside that access.
Application: the CFO's reason does not override the right. The auditor should also ask for additional information and support to discharge duties.
Practical step: make a written request, note the refusal in the working papers, and escalate to the Board or Audit Committee.
Consequence: if access stays refused, the auditor may be unable to obtain sufficient evidence, which affects the opinion.

Answer: The auditor is entitled to the subsidiary ledgers for consolidation. The refusal should be requested again in writing, documented in the working papers and escalated. Continued refusal limits the audit evidence.

Example 2

An auditor of Kaveri Foods Ltd finds that an employee diverted company funds through fake vendor payments. Explain the auditor's duty and how the matter is recorded.

Show the solution

Rule: if the auditor has reason to believe an offence involving fraud is being or has been committed against the company by officers or employees, Section 143(12) applies.
Application: the diversion through fake vendors is such a fraud.
Step 1: forward the report to the Board or Audit Committee, seeking their reply or observations.
Step 2: after considering the reply, forward the report to the Central Government under the prescribed rules.
Protection: the reporting is in good faith and is not a breach of confidentiality.
Documentation: record the evidence, procedures, communications and conclusion in the working papers, which reviewers may inspect.

Answer: The auditor must report the fraud first to the Board or Audit Committee for their reply and then to the Central Government. The reporting is protected, and the whole process must be documented in the working papers.

Exam tips

Quote the phrase 'at all times' and 'such information and explanations as the auditor thinks necessary' when writing on rights.
Always give the fraud reporting sequence: Board or Audit Committee first, then the Central Government.
In case questions, end with a documentation point: what goes into the working papers.
Keep each answer in three parts: provision, analysis of the facts, conclusion.
Mention peer or quality review access when the question asks why working papers matter.

Practice questions from Audit Engagement

Auditor's Rights, Duties and Engagement Documentation in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Auditor's Rights, Duties and Engagement Documentation: frequently asked questions

What are the main rights of an auditor?

The auditor has access at all times to books, accounts, vouchers and records, including electronic books. The auditor can also access subsidiary records for consolidation and can require information and explanations from officers.

What must an auditor do on finding fraud?

If the auditor has reason to believe an offence involving fraud is being or has been committed against the company by officers or employees, the auditor reports under Section 143(12). The report goes to the Board or Audit Committee for reply, then to the Central Government.

What are working papers?

They are the auditor's record of procedures performed, evidence obtained and conclusions reached. Peer or quality reviewers may inspect them or take abstracts.

Is fraud reporting a breach of confidentiality?

No. The engagement terms say such reporting is made in good faith under the Act and cannot be treated as a breach or be subject to any suit or prosecution.