Internal and Forensic Audit · Basic Concepts of Forensic Audit

Forensic Audit vs Statutory Audit and Internal Audit

Updated 11 October 2026 · Fact-checked

Forensic audit examines records to establish whether fraud or misstatement occurred, who is responsible, and how much was lost, with evidence fit for legal proceedings. Statutory audit gives an opinion on true and fair financial statements. Internal audit evaluates controls and risk for management. Compare them on purpose, scope, approach and outcome.

Understand Forensic Audit vs Statutory and Internal Audit

Start with one idea: all these reviews look at the same entity, but each answers a different question.

Statutory audit asks: do the financial statements give a true and fair view? An independent auditor appointed under the Companies Act, 2013 forms an opinion for the members and other users. It works on materiality and sampling. It is not designed to find every fraud.

Internal audit asks: are our controls, risk management and processes working? It is done for management and the audit committee, by an employee or an outside firm. It covers operations, compliance and controls through the year, and it is preventive and advisory.

Forensic audit asks: was there fraud, how did it happen, who did it, and how much was lost? It begins with a suspicion, an allegation or a red flag. It is targeted, not a routine cycle. It is often done at full depth, not on samples. Evidence is gathered and preserved so that it can stand in court or before a regulator. The output is a report that may support prosecution, recovery or disciplinary action.

Investigation is a wider legal term. It is an inquiry into the affairs of a company or a person, ordered or carried out under law, for example by the Registrar, the Central Government or SFIO. Forensic audit is a financial tool that often feeds into an investigation. An investigation can also cover non-financial matters and has statutory powers. A forensic auditor has only the powers given by the engagement terms or by the authority that appoints them.

So the key contrasts are: opinion versus finding, routine versus event-driven, sample versus targeted depth, and a report for users versus a report for legal use.

Key rules to remember

Purpose contrast: Statutory = true and fair opinion; Internal = control and risk assurance; Forensic = fraud finding and evidence; Lead every comparison answer with purpose.
Timing contrast: Statutory = periodic, after year end; Internal = continuous or periodic; Forensic = event-driven, on suspicion; Forensic audit is not a fixed annual cycle.
Approach contrast: Statutory = sampling and materiality; Internal = risk-based; Forensic = targeted, detailed, suspicion-led; Forensic work is not bound by materiality in the same way, since small amounts may show a fraud pattern.
Outcome contrast: Statutory = audit report with opinion; Internal = recommendations to management; Forensic = findings report usable as evidence; Say who receives each report.
Investigation link: Forensic audit = financial examination tool; Investigation = wider legal inquiry that may use it; Do not treat the two words as identical.

How to solve Forensic Audit vs Statutory and Internal Audit questions

Use this method for any 'differentiate' or 'compare' question on these audits.

1Identify the pair or set being compared, for example forensic and statutory audit, or forensic audit and investigation.
2Choose 5 to 7 bases of difference: objective, who appoints, scope, approach, timing, evidence standard, report and outcome.
3Write the contrast for each base in one crisp line per party, side by side if a table suits, else in bullets.
4Anchor each side in its legal or professional basis, such as appointment under the Companies Act, 2013 for statutory audit.
5Add one practical point, such as a fraud found during a statutory audit that is then referred for forensic audit.
6Close with a one-line conclusion on how the audits complement each other.
7If the question is case-based, apply the bases to the facts and state which audit fits.

Quickest way: Purpose-Scope-Approach-Outcome (PSAO) grid

When to use it: Use it when you have under five minutes for a comparison question.

Write four headings: Purpose, Scope, Approach, Outcome.
Fill one line each for the audit types asked.
Add two extra rows if time allows: Who appoints, Timing.
End with one line on how they complement each other.

Common mistakes in Forensic Audit vs Statutory and Internal Audit

Saying statutory audit is meant to detect all frauds.
Students mix up the auditor's duty to report fraud with a duty to find every fraud.
Fix: Write that statutory audit gives an opinion on true and fair statements using sampling and materiality, and it does not guarantee finding all frauds.
Treating forensic audit and investigation as the same.
Both deal with suspected wrongdoing, so the terms feel identical.
Fix: Say forensic audit is a financial examination with evidence focus, while investigation is a wider legal inquiry that can use forensic findings.
Describing internal audit as independent of the entity in the way statutory audit is.
Both are called audits, so the reporting line is overlooked.
Fix: State that internal audit serves management and the audit committee, while the statutory auditor reports to members.
Calling forensic audit a yearly routine.
Students carry over the periodic pattern of the other two audits.
Fix: Write that it is triggered by suspicion, allegation, red flags or a regulator's or court's direction.
Ignoring the evidence standard in the answer.
Students compare only purpose and scope.
Fix: Always add a row on evidence: forensic audit preserves evidence and chain of custody so it can be used in legal proceedings.
Giving one-sided lists instead of a comparison.
Students describe each audit separately and run out of time.
Fix: Compare base by base, with both parties on each line.

Worked examples

Example 1

Distinguish between forensic audit and statutory audit.

Show the solution

Purpose: statutory audit forms an opinion on whether the financial statements give a true and fair view. Forensic audit establishes whether fraud occurred, how, by whom and the loss.
Appointment: the statutory auditor is appointed under the Companies Act, 2013 and reports to members. A forensic auditor is engaged by management, the board, a regulator, a lender or a court.
Timing: statutory audit is periodic, after the financial year. Forensic audit is event-driven and follows a suspicion or allegation.
Approach: statutory audit relies on sampling and materiality. Forensic audit is targeted and detailed, and small items may matter.
Evidence: statutory audit gathers sufficient appropriate evidence for the opinion. Forensic audit gathers and preserves evidence fit for legal proceedings.
Outcome: statutory audit ends in an audit report with an opinion. Forensic audit ends in a findings report that may support prosecution, recovery or disciplinary action.

Answer: Statutory audit gives an opinion on the financial statements on a routine, sample basis. Forensic audit is a suspicion-led, detailed examination that produces legally usable findings on fraud.

Example 2

During a year, the internal auditor of Kaveri Textiles Ltd notices repeated small payments to one vendor just below the approval limit. The audit committee wants to know whether there is fraud, who is involved and the amount lost. Which audit is suitable, and how does it differ from the internal audit already done?

Show the solution

Identify the facts: a pattern of payments just below the approval limit is a red flag for split-order fraud.
State what internal audit has done: it has spotted the control weakness and reported to the audit committee. Its role is to assess controls and risk and to recommend improvements.
Identify the new need: the committee wants to know whether fraud occurred, who is responsible and the loss. That is a forensic question.
Recommend a forensic audit: a targeted review of all payments to that vendor, vendor records, approvals and related-party links, with evidence preserved.
Contrast scope and approach: internal audit is routine and risk-based, while forensic audit is specific, detailed and suspicion-led.
Contrast outcome: internal audit gives recommendations to management, while forensic audit gives a findings report usable in disciplinary or legal action.

Answer: A forensic audit is suitable. Internal audit flagged the weakness, but only forensic audit can establish fraud, the persons involved and the loss with evidence fit for legal use.

Exam tips

Always give the comparison in a side-by-side or point-by-point form, with at least five bases.
Add the evidence and legal-use row for forensic audit. It is the point many students skip.
For forensic audit versus investigation, say forensic audit is a tool and investigation is a wider legal inquiry with statutory powers.
In case questions, show the progression: red flag, then internal or statutory finding, then forensic audit, then legal action.
Do not claim that any audit guarantees detection of all fraud.

Practice questions from Basic Concepts of Forensic Audit

Forensic Audit vs Statutory and Internal Audit in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Forensic Audit vs Statutory and Internal Audit: frequently asked questions

What is the main difference between forensic audit and statutory audit?

Statutory audit gives an opinion on whether financial statements are true and fair. Forensic audit looks into suspected fraud and gathers evidence for legal use. The first is routine and sample-based, the second is event-driven and detailed.

How is forensic audit different from internal audit?

Internal audit reviews controls, risk and processes for management and is preventive and advisory. Forensic audit starts from a suspicion and finds out what happened, who was involved and the loss. Its report is built for legal use.

Is forensic audit the same as investigation?

No. Investigation is a wider legal inquiry into affairs, which may be ordered under law and may have statutory powers. Forensic audit is a financial examination that often supports an investigation.

Can a statutory auditor do a forensic audit of the same company?

Doing both raises independence concerns. Forensic work is usually given to a separate, independent team or firm, and the engagement should be agreed in writing.