Skip to content

CS Professional · Paper 4.2

CS Professional Internal and Forensic Audit Paper Guide

Internal and Forensic Audit is Elective 1 (Paper 4.2) of CS Professional. It is a 3-hour written, case-based paper of 100 marks: Internal Audit carries 60 and Forensic Audit 40. You must explain the concept, apply it to the facts given, and conclude. To pass a group, you need at least 40% in each paper and 50% in the group aggregate at one sitting.

This paper tests whether you can think like an auditor. Internal Audit (60 marks) covers its scope, practices, internal controls, engagement planning, tools and techniques, audit of specific functions and entities, reporting, and emerging issues. Forensic Audit (40 marks) covers basic concepts, audit versus investigation, the laws and regulations involved, Indian evidence law, cyber forensics and fraud detection techniques.

The paper is written and case-based. A typical question gives you a company situation, such as weak controls in a purchase cycle or a suspected payment fraud. You are expected to name the relevant concept or provision, analyse the facts, and reach a conclusion with practical recommendations. Elective papers are open book, so the books will not give you marks by themselves. Marks come from knowing where things are and applying them quickly.

Students usually score well when they structure answers cleanly and use practical examples. They lose marks when they write general theory without linking it to the facts. The forensic part feels unfamiliar to many, so it often decides the final score. Give it steady attention from the start. Check the latest ICSI study material and announcements for the exact question pattern, because the paper format is not detailed here.

Internal and Forensic Audit: chapters and topics

Part I: Internal Audit

Internal Audit: Introduction and Overview

Part I: Internal Audit

Practices related to Internal Auditing

Part I: Internal Audit

Internal Controls

Part I: Internal Audit

Internal Audit Engagements and Planning

Part I: Internal Audit

Internal Audit Tools and Techniques

Part I: Internal Audit

Internal Audit of Specific Functions

Part I: Internal Audit

Special Points relating to Internal Audit in various Entities

Part I: Internal Audit

Reporting under Internal Audit

Part I: Internal Audit

Emerging Issues and Challenges

Part II: Forensic Audit

Basic Concepts of Forensic Audit

Part II: Forensic Audit

Audit and Investigations

Part II: Forensic Audit

Forensic Audit: Laws and Regulations

Part II: Forensic Audit

Forensic Audit and Indian Evidence Law

Part II: Forensic Audit

Cyber Forensics

Part II: Forensic Audit

Fraud Detecting Techniques

How to prepare Internal and Forensic Audit

Plan around the two parts. Internal Audit has more marks and more chapters. Forensic Audit is smaller but needs precise legal and technical points. Aim for understanding first, then speed with open-book material.

  1. Read the full syllabus and map the syllabus chapters to the two parts, Internal Audit and Forensic Audit. Note which chapters are conceptual and which are legal.
  2. Study Internal Audit in sequence: introduction, practices, internal controls, engagement planning, tools and techniques. These chapters are the base for everything else in the part.
  3. Then cover audit of specific functions, special points for various entities, reporting and emerging issues. For each function, list the key risks, controls and audit checks in your own words.
  4. Study Forensic Audit concepts, then audit versus investigation. Build a short comparison note on objective, scope, approach and output.
  5. Learn the laws and the evidence chapter with exact conditions. Write each rule in plain words with what it requires and when it applies. Do not quote sections you are unsure of.
  6. Cover cyber forensics and fraud detection techniques. For each technique, note what it detects and a simple example, such as a duplicate payment or a ghost vendor.
  7. Prepare open-book aids: a chapter index, tabbed pages, and one-page summaries of frameworks and checklists. Practise finding a topic within a minute.
  8. Practise case-based questions and past papers under timed conditions. Write in the order provision, analysis, conclusion, then compare your answer with the model and fix gaps.
  9. In the last two weeks, revise your summaries, redo weak chapters, and attempt at least two full 3-hour mock papers.

Time management in the exam

  • Use the extra 15 minutes for reading to choose your questions and mark the facts in each case. Note the part each question belongs to.
  • Here is a suggested approach, not an ICSI rule. Split the 180 minutes of writing time at about 1.5 minutes per mark. That is about 150 minutes of writing for 100 marks and leaves about 30 minutes for lookups and review. The 15 minutes of reading time is separate and comes on top of these 180 minutes.
  • Keep open-book lookups short. If you cannot find a reference in about a minute, answer from understanding and return later.
  • Start with the questions you are surest of. This builds a base of marks and leaves more time for harder cases.
  • For case questions, spend the first minutes listing issues, then write. A short plan stops you from drifting into general theory.
  • Stop each answer at its time limit. Leave space and move on, then return if time remains.

Mistakes that cost marks in Internal and Forensic Audit

  • Writing textbook theory without using the facts of the case

    Fix: Quote the facts in your analysis. Link each point to a detail in the case before you conclude.

  • Relying on the open book instead of preparing

    Fix: Prepare as for a closed-book paper. Use the book only to confirm exact wording and details.

  • Neglecting Forensic Audit because it has fewer marks

    Fix: Give Forensic Audit fixed study slots. Its 40 marks can decide whether you cross the 40% mark.

  • Confusing audit with investigation

    Fix: Keep a comparison note on purpose, scope, approach and output, and use it in answers.

  • Giving no practical recommendations or conclusion

    Fix: End each case answer with a clear conclusion and two or three specific steps, such as a control to add or a report to issue.

  • Stating legal provisions loosely or with uncertain section numbers

    Fix: State the rule in plain words with its conditions. Give a section number only when you are certain of it.

Internal and Forensic Audit: frequently asked questions

How many marks is the Internal and Forensic Audit paper?

It is 100 marks. Internal Audit carries 60 marks and Forensic Audit 40 marks. It is a 3-hour written paper, with 15 extra minutes to read the question paper.

Is Internal and Forensic Audit an open book paper?

Yes. Elective papers in CS Professional are open book. You still need to know your material well, because the questions are case-based and test application.

What is the passing mark for this paper?

To pass a group, you need at least 40% in each paper and 50% in the aggregate of that group at one sitting. There is no negative marking. If you fail the group but score 60% or more in a paper and at least 25% in each other paper of the group, you can claim exemption from that paper in later attempts by applying before the enrolment deadline.

Which part should I study first?

Start with Internal Audit, since it has more marks and builds the audit basics. Move to Forensic Audit once you are comfortable with controls, planning and reporting.

Are there MCQs in this paper?

No. All CS Professional papers are descriptive written papers. Prepare to draft structured answers with analysis and a conclusion.