Professional skepticism in audit, related party scrutiny and tamper-evident documentation requirements reinforced in NFRA action.
An auditor must exercise professional skepticism, independently assess fraud risk, related party exposures, business rationale and recoverability, and obtain sufficient appropriate audit evidence; reliance on component auditors or management explanations is not enough where circular fund movements, round-tripping and understated balances are indicated. The audit must also verify end use of loans and guarantees, test related party lending and report statutory non-compliance under section 185 where established. Audit documentation and quality control records must preserve a reliable, tamper-evident trail showing when work was done, by whom, and on what basis. Failures of this kind may amount to professional misconduct, supporting penalty and debarment.
Issues: (i) Whether the auditors failed to detect and report fraudulent diversion of funds, understatement of related party balances, and evergreening in the audit of the consolidated financial statements. (ii) Whether the auditors failed to verify end use of loans and guarantees and to report non-compliance with section 185 in the standalone financial statements. (iii) Whether the audit firm and engagement partner violated audit documentation and quality control requirements under SQC 1 and SA 230. (iv) Whether the proved failures constituted professional misconduct warranting penalty and debarment.
Issue (i): Whether the auditors failed to detect and report fraudulent diversion of funds, understatement of related party balances, and evergreening in the audit of the consolidated financial statements.
Analysis: The audit involved substantial related party exposures, unusually large advances, circular movement of funds, and book-entry based reductions in outstanding balances. The auditors relied heavily on component auditors and management explanations, but did not perform adequate additional procedures, independent verification, or meaningful assessment of business rationale, recoverability, and fraud risk. The findings also recorded that bank statements and related party balances revealed structured circulation of funds and repeated same-day round-tripping that understated the true exposure.
Conclusion: The failure to apply professional skepticism, assess fraud risk, and obtain sufficient appropriate audit evidence was established against the auditors.
Issue (ii): Whether the auditors failed to verify end use of loans and guarantees and to report non-compliance with section 185 in the standalone financial statements.
Analysis: The standalone audit record did not show adequate verification of the end use of large loans and guarantees granted to subsidiaries, nor did it show proper testing of whether the borrowing entities used the funds for their principal business activities. The audit also did not evidence the required scrutiny of related party lending, guarantees, or the factual basis for treating the transactions as compliant. Reliance on management representations and partial repayment did not satisfy the reporting obligations under the audit framework and CARO.
Conclusion: The auditors were held to have failed to report the section 185 non-compliance and the related audit lapse was proved.
Issue (iii): Whether the audit firm and engagement partner violated audit documentation and quality control requirements under SQC 1 and SA 230.
Analysis: The electronic audit system permitted post-signoff alterations, creation of new work papers, and modification of existing work papers without adequately preserving the identity of the modifier, the date of modification, or a reliable audit trail. The record showed work papers created or altered after the audit report date and other documents modified without proper sign-off. These defects meant the engagement file did not reliably evidence when procedures were performed, who performed or reviewed them, or whether the documentation was complete and tamper-proof.
Conclusion: The firm and the engagement partner were found in violation of the documentation and quality control standards.
Issue (iv): Whether the proved failures constituted professional misconduct warranting penalty and debarment.
Analysis: The established lapses amounted to failure to disclose material facts, failure to report material misstatements, gross negligence, failure to obtain sufficient information for an opinion, and failure to invite attention to material departures from accepted audit procedure. The authority treated the firm as primarily responsible for the audit report issued in its name and held the firm, engagement partner, and engagement quality control reviewer accountable in the respective roles found proved on the record.
Conclusion: Professional misconduct was proved and monetary penalties and debarment were justified.
Final Conclusion: The auditors were found guilty of serious audit failures in relation to fraud detection, related party exposures, statutory compliance, and audit documentation, and sanctions were imposed accordingly.
Ratio Decidendi: An auditor, including the principal auditor of a listed company, must independently assess fraud risk, business rationale, recoverability, and related party transactions with professional skepticism and sufficient appropriate evidence, and may not discharge that duty by blind reliance on component auditors or management representations; audit documentation must also preserve a reliable and tamper-evident record of the work performed.
TaxTMI 
AI Drafter ✕
TaxTMI 
