Environmental, Social and Governance (ESG) - Principles and Practice · Stakeholders Rights

Vigil Mechanism and Protection of Stakeholder Interests

Updated 11 October 2026 · Fact-checked

A vigil mechanism is a channel through which directors and employees report genuine concerns. Section 177(9) and (10) of the Companies Act, 2013 require it for every listed company and prescribed classes. It must protect users from victimisation and give direct access to the Audit Committee chairperson in appropriate or exceptional cases.

Understand Vigil Mechanism and Protection of Stakeholder Interests

Stakeholders are the people affected by a company: employees, investors, customers, suppliers, lenders and communities. Their rights mean little unless they can raise a problem and be heard. A vigil mechanism is the internal channel that lets insiders raise a concern early, before it becomes fraud, a regulatory breach or a scandal.

Section 177(9) says every listed company, or such class of companies as may be prescribed, shall establish a vigil mechanism for directors and employees to report genuine concerns in the prescribed manner. The Act itself names directors and employees as users. The detailed classes and manner come from the rules, so state them without a section number.

Section 177(10) gives the safeguards. The mechanism must provide adequate safeguards against victimisation of persons who use it. It must also provide direct access to the chairperson of the Audit Committee in appropriate or exceptional cases. The company must disclose the details of the mechanism on its website, if any, and in the Board's report.

The Audit Committee sits at the centre. Under section 177(4) it evaluates internal financial controls and risk management systems, and under section 177(6) it can investigate matters in its terms of reference, take external professional advice and have full access to company records. A concern reaching the chairperson therefore reaches a body with real powers.

Vigil mechanism is only one tool. Stakeholder protection also needs engagement: the Stakeholders Relationship Committee for security holders' grievances, investor grievance redressal through the SEBI SCORES platform, customer complaint systems, employee forums and community consultation under CSR and ESG policies. For minority shareholders, protection comes from voting rights, disclosures, related party transaction approval by the Audit Committee, and the remedies of the Act. In an answer, link the channel (report), the safeguard (no victimisation), the oversight (Audit Committee) and the disclosure (website and Board's report).

Key rules to remember

Who must set up a vigil mechanism: Every listed company + prescribed classes of companies → vigil mechanism for directors and employees (Section 177(9)); Purpose: report genuine concerns. The manner and the classes are as prescribed in the rules.
Mandatory features: Safeguards against victimisation + direct access to Audit Committee chairperson in appropriate or exceptional cases (Section 177(10)); Both features are required. Direct access is not for every complaint, only appropriate or exceptional cases.
Disclosure: Details on company website, if any + in the Board's report (Section 177(10) proviso); Board's report also discloses Audit Committee composition and any recommendation not accepted, with reasons (Section 177(8)).
Audit Committee composition: Minimum 3 directors; independent directors in majority (Section 177(2)); Majority of members, including the Chairperson, must be able to read and understand financial statements.
Audit Committee powers: Investigate matters in section 177(4) or referred by Board; obtain external professional advice; full access to records (Section 177(6)); Auditors and KMP may be heard when the auditor's report is considered but cannot vote (Section 177(7)).
Audit Committee requirement: Every listed public company + prescribed classes must constitute an Audit Committee (Section 177(1)); The text reads 'every listed public company' after the 2018 amendment.

How to solve Vigil Mechanism and Protection of Stakeholder Interests questions

Use this order for any theory or case question on vigil mechanism and stakeholder protection. It follows the paper's pattern of provision, analysis, conclusion.

1Identify the stakeholder and the problem: employee reporting fraud, minority shareholder facing unfair treatment, investor with an unresolved complaint, or community affected by operations.
2State the provision: for reporting concerns, cite section 177(9) and (10). For committees, cite the relevant section only if you are certain of it.
3Check applicability from the facts: is the company listed or in a prescribed class? If the company is unlisted, say the position depends on the prescribed classes.
4Apply the features: channel for directors and employees, safeguards against victimisation, direct access to the Audit Committee chairperson in appropriate or exceptional cases.
5Bring in the oversight body: Audit Committee powers under section 177(4) to (6), and Stakeholders Relationship Committee or SCORES for investor grievances.
6Add practical compliance: written whistle-blower policy, Board approval, website disclosure, Board's report disclosure, confidentiality, record of complaints and action taken.
7Link to ESG: say how the mechanism supports the governance pillar, trust and risk management.
8Conclude clearly: state what the company must do or whether it has complied.

Quickest way: Four-point answer frame

When to use it: Use when time is short or the question asks you to explain or discuss the vigil mechanism.

Who: listed companies and prescribed classes; users are directors and employees.
What: channel to report genuine concerns, with safeguards against victimisation.
Who oversees: direct access to Audit Committee chairperson in appropriate or exceptional cases.
Disclosure: website and Board's report. Close with one ESG line on trust and early risk detection.

Common mistakes in Vigil Mechanism and Protection of Stakeholder Interests

Saying a vigil mechanism is required only for large companies by turnover.
Students mix it up with CSR or other thresholds.
Fix: Quote section 177(9): every listed company and such classes as are prescribed. Do not invent thresholds.
Writing that every complaint goes straight to the Audit Committee chairperson.
Students remember 'direct access' and drop the condition.
Fix: Write 'in appropriate or exceptional cases', as in section 177(10).
Leaving out the safeguards against victimisation.
Focus stays on the reporting channel.
Fix: Always state both limbs: channel and protection. Protection is what makes people use it.
Forgetting disclosure.
Disclosure feels like an add-on rather than part of the rule.
Fix: Mention website disclosure, if the company has a website, and disclosure in the Board's report.
Treating the Audit Committee as a body of any three directors.
Students recall the number but not the independence condition.
Fix: State minimum three directors with independent directors forming a majority, and the financial literacy proviso.
Quoting section numbers or case names without being sure.
Students try to look thorough.
Fix: Use sections 177 and 125 as given. Where unsure, state the rule in words without a number.

Worked examples

Example 1

Meridian Textiles Ltd, a listed company, has an accounts executive who suspects that sales are being booked early. She fears losing her job if she complains to her manager. Advise on the mechanism the company must have and how it protects her.

Show the solution

Provision: section 177(9) requires every listed company to establish a vigil mechanism for directors and employees to report genuine concerns in the prescribed manner.
Application: Meridian is listed, so the requirement applies. The executive is an employee and is a permitted user.
Safeguards: section 177(10) requires adequate safeguards against victimisation of persons using the mechanism. Her fear of dismissal is the risk this addresses.
Access: if the concern is serious or involves senior management, the mechanism must allow direct access to the Audit Committee chairperson in appropriate or exceptional cases.
Oversight: the Audit Committee can investigate matters within its terms of reference, take external professional advice and have full access to records under section 177(6). Evaluating internal financial controls is part of its terms under section 177(4).
Compliance: the company should have a written policy, and disclose the mechanism on its website and in the Board's report.

Answer: Meridian must maintain a vigil mechanism with safeguards against victimisation and direct access to the Audit Committee chairperson in appropriate or exceptional cases. The executive can use it, the Audit Committee can investigate, and the company must disclose the mechanism on its website and in the Board's report.

Example 2

Explain how a listed company can protect the interests of minority shareholders and investors through governance mechanisms, with reference to the Audit Committee and the Investor Education and Protection Fund.

Show the solution

Introduce: minority shareholders have little voting power, so protection depends on oversight, disclosure and a route for grievances.
Audit Committee: under section 177(4)(iv) it approves related party transactions and any modification, which limits favouritism to promoters. It also scrutinises inter-corporate loans and investments under clause (v) and examines financial statements under clause (iii).
Independence: independent directors form a majority of the committee under section 177(2).
Transparency: the Board's report discloses the committee's composition and any recommendation not accepted, with reasons, under section 177(8).
Reporting channel: the vigil mechanism lets directors and employees raise concerns about misuse of funds or unfair dealing.
Investor Education and Protection Fund: under section 125 it receives unpaid dividends and other amounts unclaimed for seven years, as the section provides. It is used for refunds of unclaimed dividends, matured deposits and debentures, and promoting investor education, awareness and protection. A person claiming an amount may apply to the authority under section 125(4).
Conclude: protection comes from layered controls, namely oversight, disclosure, reporting and a remedy.

Answer: Minority shareholders are protected by independent Audit Committee scrutiny of related party transactions and loans, Board's report disclosures, the vigil mechanism, and the IEPF under section 125, which refunds eligible unclaimed amounts and funds investor education and protection.

Exam tips

Write the provision first, then apply it to the facts. Examiners reward this order.
Use the exact phrases 'genuine concerns', 'safeguards against victimisation' and 'appropriate or exceptional cases'.
Always add practical points: written policy, confidentiality, website and Board's report disclosure.
For stakeholder engagement questions, name each stakeholder group and give one mechanism per group, then tie it to ESG governance.
If you cannot recall a rule's number or threshold, state the rule in words rather than guessing.

Practice questions from Stakeholders Rights

Vigil Mechanism and Protection of Stakeholder Interests: frequently asked questions

Is a vigil mechanism mandatory for every company?

No. Section 177(9) requires it for every listed company and for such classes of companies as are prescribed. Check the facts for listing or the prescribed class before answering.

Who can use the vigil mechanism?

Section 177(9) provides it for directors and employees to report genuine concerns. The company may widen access in its own policy, but the Act names these two groups.

Can a whistle-blower go directly to the Audit Committee chairperson?

Yes, but only in appropriate or exceptional cases, as section 177(10) says. The mechanism must make this access available.

Where does the company disclose its vigil mechanism?

The details must be disclosed on the company's website, if any, and in the Board's report under the proviso to section 177(10).

What is the SCORES platform?

SCORES is the SEBI platform where investors lodge complaints against listed companies and intermediaries and track them. It supports investor grievance redressal alongside the company's own Stakeholders Relationship Committee.