Internal and Forensic Audit · Internal Audit of Specific Functions

Internal Audit of Production, Compliance and Other Functions

Updated 11 October 2026 · Fact-checked

Internal audit of a function means testing its controls, records and results against policy, law and budget, then reporting gaps with fixes. For production, you check planning, material use, cost, wastage and quality. For compliance and CSR, you check law, approvals, spending and evidence. Answer in a fixed order: objective, risks, tests, findings, recommendations.

Understand Internal Audit of Production, Compliance and Other Functions

An internal auditor does not audit only accounts. The auditor also reviews how each function of the entity works. Production, quality, compliance and CSR are such functions. Each has its own risks, records and people, so each needs its own audit programme.

Start with the objective of the function. A production unit must make the right quantity, at the right quality, at the planned cost, on time. Your audit asks whether the controls let the unit meet these aims. Weak controls show up as excess material use, idle time, rework, rejections, and cost overruns.

A compliance function must make sure the entity follows applicable laws and its own policies. Here you check whether a legal register exists, who owns each requirement, whether filings are on time, and whether non-compliance is reported to management and the board or audit committee. You test samples of filings against due dates and proof of filing.

CSR and other specialised functions (for example R&D, logistics, maintenance, environment and safety) follow the same logic. Understand the policy, identify risks, test controls on a sample, and compare actual with approved. For CSR, you also check that the spending follows the board-approved policy and annual action plan, that projects fall within permitted activities, and that implementation partners are vetted and report utilisation.

The auditor reports facts with evidence and gives practical recommendations. The auditor does not run the function. Management stays responsible for fixing the gaps, and you follow up on them later.

Key rules to remember

Material usage variance: (Standard quantity for actual output − Actual quantity used) × Standard price; A negative result means adverse variance, that is, excess use of material. Use it to test wastage claims.
Normal and abnormal wastage: Normal wastage % = (Normal loss ÷ Input) × 100; Normal loss is built into standard cost. Loss above the norm is abnormal and needs investigation. Do not treat both the same way.
Yield: Yield % = (Actual output ÷ Actual input) × 100; Compare with the standard yield. A fall in yield points to wastage, theft or process faults.
Rejection rate: Rejection rate % = (Units rejected ÷ Units inspected) × 100; A quality control measure. Track it by batch, line and period to spot trends.
Capacity utilisation: Capacity utilisation % = (Actual output ÷ Normal capacity) × 100; Low utilisation signals idle time, poor planning or breakdowns.
Compliance rate: Compliance rate % = (Requirements met on time ÷ Total requirements tested) × 100; A simple measure for reporting the result of testing a sample of filings.

How to solve Internal Audit of Production, Compliance and Other Functions questions

Use the same frame for any question on auditing a function. It keeps your answer organised and shows the examiner the logic.

1State the objective of the function and the main risks, such as loss, delay, non-compliance, fraud or misstatement.
2Name the documents and records you will rely on, such as the production plan, material requisition, job cards, inspection reports, legal register, filing proof or CSR policy.
3List the controls you expect to find, for example approvals, segregation of duties, reconciliations and monitoring reports.
4Describe the tests: inspection, observation, inquiry, recomputation, reconciliation and sampling against standards or due dates.
5Give the likely findings tied to the facts in the question, such as abnormal wastage, missed due dates or unspent CSR funds.
6Recommend specific, practical fixes with an owner, such as a revised norm, an alert in the compliance calendar or a utilisation certificate.
7Close with reporting and follow-up: to whom you report and how you will check that actions were taken.

Quickest way: Objective–Risk–Test–Fix in four lines

When to use it: Use it when time is short or the question asks you to list audit points for a function without much data.

Write the objective of the function in one line.
List three to five risks as short bullets.
For each risk, write one test and one document you will check.
End with two or three recommendations and the follow-up step.
If numbers are given, compute the variance or rate first, then explain what it means.

Common mistakes in Internal Audit of Production, Compliance and Other Functions

Writing a general audit procedure without naming the function's records.
Students memorise generic steps and apply them everywhere.
Fix: Name function-specific documents, such as job cards and BOM for production, or the legal register for compliance.
Treating all wastage as a problem.
The difference between normal and abnormal loss is forgotten.
Fix: Compare actual loss with the norm. Only the excess needs investigation and accounting as abnormal.
Acting as if the auditor corrects the issue.
Students confuse audit with management.
Fix: Say you report and recommend. Management implements. You then follow up.
Auditing compliance only by checking if filings were made.
Focus stays on the outcome and not the system.
Fix: Also test ownership, tracking tools, review, escalation and timeliness of each filing.
Ignoring the facts given in the question.
Students rush to write a ready-made answer.
Fix: Underline the facts and tie each finding and recommendation to one of them.
Treating CSR audit as only checking the amount spent.
Spending is the most visible figure.
Fix: Also check policy approval, eligible activities, partner vetting, utilisation proof, unspent amount treatment and disclosure.

Worked examples

Example 1

A plant's standard for a product is 10 kg of raw material per unit, with a standard price of ₹50 per kg. In a month it made 2,000 units and used 21,500 kg. As internal auditor, compute the material usage variance and state what you will examine.

Show the solution

Standard quantity for actual output = 2,000 × 10 = 20,000 kg.
Actual quantity used = 21,500 kg.
Excess use = 21,500 − 20,000 = 1,500 kg.
Variance = 1,500 × ₹50 = ₹75,000, which is adverse.
Check whether the norm allows for normal loss. If the standard already includes it, the whole excess is to be explained.
Examine material issue slips against job cards, scrap and rejection records, machine breakdown logs, storage conditions and any unrecorded issues or theft.
Recommend tighter issue control, scrap reporting by shift and a review of the norm if it is outdated.

Answer: Material usage variance is ₹75,000 adverse (1,500 kg excess). The auditor should trace the cause through issue records, scrap, rejection and process data, and then recommend controls.

Example 2

You are auditing the CSR function of a company. List the key audit areas and the evidence you would examine.

Show the solution

Objective: confirm that CSR spending follows the law, the board-approved policy and the annual action plan, and gives real results.
Governance: check the CSR committee's constitution, the board's approval of the policy and annual action plan, and meeting minutes.
Project selection: check that each project falls within permitted activities and matches the approved plan.
Implementation: for implementing agencies, check vetting, agreements, and their utilisation and progress reports.
Spending: match payments to approvals and invoices, and check for unspent amounts and how they were dealt with and disclosed.
Impact and reporting: check monitoring reports, any impact assessment, and the disclosure in the board's report.
Findings and fixes: report gaps such as missing utilisation proof, recommend corrective steps, and follow up.

Answer: The audit covers governance, project eligibility, implementing partners, spending and unspent funds, monitoring, and disclosure. Each area is tested on documents. Gaps are reported with recommendations and a follow-up.

Exam tips

Begin each answer with the objective and risks of the function. It shows structure at once.
Use function-specific terms: BOM, job card, yield, scrap, legal register, utilisation certificate.
Where numbers are given, compute first and state whether the variance is adverse or favourable.
Use bullets for audit steps and keep one line per point to save time.
Always end with a recommendation and a follow-up. Many students miss this.

Practice questions from Internal Audit of Specific Functions

Internal Audit of Production, Compliance and Other Functions in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Internal Audit of Production, Compliance and Other Functions: frequently asked questions

What does an internal auditor check in production?

The auditor checks planning, material issue and use, cost records, wastage, capacity use, quality control and stock of work in progress. The aim is to find losses, delays and control gaps. The auditor then recommends improvements.

How do you audit wastage in manufacturing?

Compare actual loss with the normal loss allowed in standards. Investigate any excess, trace it to issues, scrap records and process data, and check how the loss is recorded. Recommend corrective controls.

How is the audit of statutory compliance done?

Review the legal register, ownership of each requirement, tracking tools and review process. Test a sample of filings against due dates and proof of filing. Report delays, penalties and weak escalation.

Is the audit of CSR the same as checking CSR spending?

No. Spending is only one part. You also check the policy, committee, project eligibility, partner vetting, utilisation proof, monitoring and disclosure.