67410bos54195 cp9
67410bos54195 cp9
67410bos54195 cp9
AUDIT OF BANKS
LEARNING OUTCOMES
CHAPTER OVERVIEW
Regulatory Framework
LFAR
Auditor's Report
Coducting an Audit
Reporting to RBI,
Overview
Regulators etc.
Internal Control in Certain
Selected Areas
Assets and Balances
Verfication
Capital and Liabilities
Coverage of Business/Branches
Concurrent Audit
Appointment of Auditors and its
accountability
Audit Committee
Audit Report
1. INTRODUCTION
The banking industry is the pivot of any economy and its financial system. Banks are one of the
foremost agents of financial intermediation in an economy like
India and, therefore, development of a strong and resilient
banking system is of utmost importance. The banking
institutions in the country are working in a competitive
environment and their regulatory framework is aligned with the
international best practices. Thus, financial deepening has
taken place in India and continues to be in progress with a
focus on orderly conditions in financial markets while
sustaining the growth momentum.
Banks have certain characteristics distinguishing them from
most other commercial enterprises.
The auditor should consider the effect of the above factors in designing his audit approach. It is
imperative for Branch Auditors and SCAs (Statutory Central Auditors) to have detailed knowledge of the
products offered and risks associated with them, and appropriately address them in their audit plan to
the extent they give rise to the risk of material misstatements in the financial statements.
In today’s environment, the banks use different applications to carry out different transactions
which may include data flow from one application to other application; the auditor while designing
his plans should also understand interface controls between the various applications.
2. LEGAL FRAMEWORK
There is an elaborate legal framework governing the functioning of banks in India. The principal
enactments which govern the functioning of several types of banks are:
Banking Regulation
Co-operative Act, 1949
Societies Act, 1912 State Bank of India
for Co-operative Act, 1955
Banks
Payment and
Reserve Bank of
Settlement
India Act, 1934
Systems Act, 2007
Credit Information
Companies
(Regulation) Act, Legal Companies Act,
2013
2005
Framework for
Banks in India
Securitisation and Banking
Reconstruction of Companies
Financial Assets (Acquisition and
and Enforcement Transfer of
of Security Interest Undertakings) Act,
Act, 2002 1970
Prevention of
Regional Rural
Money Laundering
Banks Act, 1976
Act, 2002 Banking
Companies
Information
(Acquisition and
Technology Act,
Transfer of
2000
Undertakings) Act,
1980
Further, the Reserve Bank of India Act, 1934 gives wide powers to the RBI to give directions to
banks which also have considerable effect on the functioning of banks
Most banks, especially those in nationalised banks or public sector, appoint four or more
(depending upon their size and Board decision, as per RBI guidelines) firms of chartered
accountants to act jointly as statutory central auditors (SCAs).
The appointment letter sent by banks in connection with the appointment of SCAs
typically contains the following:
• Period of appointment.
• Particulars of other central auditors.
• Particulars of previous auditors.
• Procedural requirements to be complied with in accepting the assignment.
1. Letter of acceptance (the letter usually contains, inter alia, averment as to
absence of disqualification for appointment, way in which the audit has to be
conducted and confirmation of present name, constitution and address of the
auditor), declaration of fidelity and secrecy, restriction on accepting other assignments
from the bank, etc.
• A statement of division of work and review and reporting responsibilities amongst joint
4. CONDUCTING AN AUDIT
The audit of banks or of their branches involves the following stages –
Thus, understanding of the accounting process is necessary to identify and assess the risks of
material misstatement whether due to fraud or not, and to design and perform further audit
procedures.
Understanding the Risk Management Process: Management develops controls and uses
performance indicators to aid in managing key business and financial risks. An effective risk
management system in a bank generally requires the following:
Oversight by those Identification,
Reliable information
charged with measurement and Control activities Monitoring activities
systems
governance monitoring of risks
• Those charged • Risks that could • A bank should • Risk management • Banks require
with governance significantly have appropriate models, reliable
(BOD/Chief impact the controls to methodologies information
Executive Officer) achievement of manage its risks, and assumptions systems that
should approve bank’s goals including effective used to measure provide adequate
written risk should be segregation of and manage risk financial,
management identified, duties should be operational and
policies. The measured and (particularly, regularly compliance
policies should be monitored against between front and assessed and information on a
consistent with pre-approved back offices), updated. This timely and
the bank’s limits and criteria accurate function may be consistent basis.
business measurement and conducted by the Those charged
objectives and reporting of independent risk with governance
strategies, capital positions, management unit. and management
strength, verification and require risk
management approval of management
expertise, transactions, information that is
regulatory reconciliation of easily understood
requirements and positions and and that enables
the types and results, setting of them to assess
amounts of risk it limits, reporting the changing
regards as and approval of nature of the
acceptable. exceptions, bank’s risk profile.
physical security
and contingency
planning.
Customer Guidelines – Anti Money Laundering Standards”), requiring banks to establish policies,
procedures and controls to deter and to recognise and report money laundering activities.
Assess Specific Risks: The auditors should identify and assess specific risks of material
misstatement at the financial statement level which refers to risks that relate to the banking
industry and the use of IT therein.
Risk Associated with Outsourcing of Activities: The modern-day banks make extensive use of
outsourcing as a means of both reducing costs as well as making use of services of an expert not
available internally. There are, however, certain risks associated with outsourcing of activities by
banks and therefore, it is quintessential for the banks to effectively manage those risks.
Stage IV: Execution
Engagement Team Discussions: The engagement team should hold discussions to gain better
understanding of bank and its environment, including internal control, and to assess the potential
for material misstatements of the financial statements.
Response to the Assessed Risks: SA 330 “The Auditor’s Responses to Assessed Risks”
requires the auditor to design and implement overall responses to address the assessed risks of
material misstatement at the financial statement level. The auditor should design and perform
further audit procedures whose nature, timing and extent are based on and are responsive to the
assessed risks of material misstatement at the assertion level.
Establish the Overall Audit Strategy: SA 300 “Planning an Audit of financial Statements’’ states
that the objective of the auditor is to plan the audit so that it will be performed in an effective
manner. For this purpose, the audit engagement partner should:
• establish the overall audit strategy, prior to the commencement of an audit; and
• involve key engagement team members and other appropriate specialists while establishing
the overall audit strategy, which depends on the characteristics of the audit engagement.
Audit Planning Memorandum: The auditor should summarise the team’s audit plan by preparing
an audit planning memorandum in order to:
• Describe the expected scope and extent of the audit procedures to be performed by the
auditor.
• Highlight all significant issues and risks identified during their planning and risk assessment
activities, as well as the decisions concerning reliance on controls.
• Provide evidence that they have planned the audit engagement appropriately and have
responded to engagement risk, pervasive risks, specific risks, and other matters affecting
the audit engagement.
Determine Audit Materiality: The auditor should consider the relationship between the audit
materiality and audit risk when conducting an audit. The determination of audit materiality is a
matter of professional judgment and depends upon the knowledge of the bank, assessment of
engagement risk, and the reporting requirements for the financial statements. Judgments about
materiality are made in light of surrounding circumstances and are affected by the size or nature of
a misstatement, or combination of both.
Consider Going Concern: In obtaining an understanding of the bank, the auditor should consider
whether there are events and conditions which may cast significant doubt on the bank’s ability to
continue as a going concern.
Stage V: Reporting
Students should refer to the reporting requirements explained in heading 8. Auditor’s Report of
this Chapter.
[Note: For detailed understanding of stages involved for conducting an audit, as discussed above,
students may refer Guidance Note on Audit of Banks.]
central auditors, branch auditors need to ensure that data review and analysis through CBS is
carried out and tests of controls and substantive checking of sample transactions is carried out
at branch level and results are shared with statutory central auditors.
It is responsibility of statutory central auditors to obtain understanding of IT environment
and various controls put in place by management and evaluate whether controls are
operating effectively. The methodology adopted by the bank in implementing and
monitoring controls should be discussed with head of IT department and based on this
understanding, audit procedures can be designed.The key security control aspects that an
auditor needs to address when undertaking audit in a computerised bank include:
• Ensure that authorised, accurate and complete data is made available for processing.
• Ensure that in case of interruption due to power, mechanical or processing failures, the
system restarts without distorting the completion of the entries and records.
• Ensure that the system prevents unauthorised amendments to the programmes.
• Verify whether “access controls” assigned to the staff-working match with the
responsibilities as per manual. It is important for the auditor to ensure that access and
authorisation rights given to employees are appropriate.
• Verify that segregation of duties is ensured while granting system access to users and
that the user activities are monitored by performing an activities log review.
• Verify that changes made in the parameters or user levels are authenticated.
• Verify that charges calculated manually for accounts when function is not regulated
through parameters are properly accounted for and authorised.
• Verify that exceptional transaction reports are being authorised and verified on a
daily basis by the concerned officials. It is important for auditor to understand the
nature of exception and its impact on financials.
• Verify that the account master and balance cannot be modified/amended/altered except
by the authorised personnel.
• Verify that all the general ledger accounts codes authorised by Head Office are in
existence in the system.
• Verify that balance in general ledger tallies with the balance in subsidiary book. .
trainings if needed, and review of work of concurrent auditors. The primary function is to ensure
that the audit function is handled smoothly, effectively & efficiently.
Risk-based Internal audit is conducted based upon the risk assessment of business and
control risks of branches. The risk assessment process includes: -
• Identification of inherent business risks in various activities undertaken by branches
(Business risk)
• Assessment of effectiveness of control systems for monitoring inherent risks of
business activities of branch (Control risk)
• Making an assessment of level and direction of various risk areas and assess level
and direction of overall business risk and control risk
• Drawing up of risk matrix taking into account factors viz. Risk of branch
Loans and • The bank should make advances only after satisfying itself as to the
Advances creditworthiness of the borrowers and after obtaining sanction from the
proper authorities of the bank.
• All the necessary documents (e.g., agreements, demand promissory
notes, letters of hypothecation, etc.) should be executed by the parties
before advances are made.
• Sufficient margin should be kept against securities taken to cover any
decline in the value thereof and to comply with Reserve Bank
directives. Such margins should be determined by the proper
authorities of the bank as a general policy or after detailed scrutiny for
specific accounts.
• All the securities should be received and returned by responsible
officer. They should be kept in the Joint custody of two such officers.
• All securities requiring registration should be registered in the name of
the bank or otherwise accompanied by the documents sufficient to give
title of the bank.
• All accounts should be kept within both the drawing power and the
sanctioned limit as per prescribed norms. Additional temporary limit
may be sanctioned, for a maximum of 20% of existing limit and 90 days
maximum tenure.
• All the accounts which exceed the sanctioned limit or drawing power or
are against unapproved securities or are otherwise irregular should be
brought to the notice of the Management/Head Office regularly.
• The operation (in each advance account) should be reviewed at least
once every year.)
Demand Drafts • The signatures on a demand draft should be checked by an officer with
the Signature Book.
• All the D.Ds. sold/ issued by a branch should be immediately confirmed
by an advice to the paying branch.
• If the paying branch does not receive proper confirmation of any D.D.
from the issuing branch or does not receive credit in its account with
that branch, it should take immediate steps to ascertain the reasons.
Inter Branch • The accounts should be adjusted only on the basis of advices (and not
Accounts on the strength of entries found in the statement of account) received
from other branches,
• Prompt action should be taken preferably by central authority, if any
entries (particularly debit entries) are not responded to by any branch
within a reasonable time.
Credit Card • There should be effective screening of applications with reasonably
Operations good credit assessments.
• There should be strict control over storage and issue of cards.
Example 2
While doing the audit of a branch of XYZ bank for the year ended 31st March 20, it was seen
that the stock statements with the same figures are submitted by borrowers month after
month with a change in the month at the top. These are just filed for formal compliance.
Such things happen because a responsible official does not check the stock statements and
get them entered in in the system, which is a lapse in internal control. Due to such a lapse,
neither the borrower nor bank staff take it sincerely, thus posing a risk of loss to bank.
The RBI, from time to time, reviews the evolving liquidity situation and accordingly decides the
rate of CRR required to be maintained by scheduled commercial banks. Therefore, the auditor
needs to refer to the master circular issued from time to time in this regard to ensure the
compliance of CRR requirements.
(ii) Statutory Liquidity Ratio (SLR) Requirements – SLR is the requirement that every
scheduled commercial bank in India is required to maintain in the form of certain liquid assets such
as gold, cash and government approved securities before providing credit to the customers. The
Reserve Bank of India requires statutory central auditors of banks to verify the compliance with
SLR requirements of 12 odd dates in different months of a fiscal year not being Fridays. The
objective of maintaining SLR is to have an amount in the form of liquid assets which can be used
to handle a sudden increase in demand for the amount from the depositors. The resultant report is
to be sent to the top management of the bank and to the Reserve Bank.
7. VERIFICATION OF ASSETS
Before beginning verification of assets and balances, the auditor should obtain an accurate
schedule of accounts in the prescribed format. The following are the steps involved in verification
of assets and balances. -
I. CASH, BANK BALANCES AND MONEY AT CALL AND SHORT NOTICE - The Third
Schedule to the Banking Regulation Act, 1949, requires disclosures to be made in the
balance sheet regarding cash, balances with Reserve Bank of India, balances with other
banks and money at call and short notice. Audit approach and audit procedures in respect of
these items is discussed as under: -
Balances with
Balances with Other Money at Call and
Cash Reserve Bank of
Banks Short Notice
India
Audit approach: The auditor’s basic objective in verification of these items is their
existence and completeness as on date of balance sheet and audit procedures have to
be tailored to meet these. Remember that cash would be appearing in balance sheet of
almost all branches. However, in most of the branches of a bank, there will be no bank
account requiring reporting except in branches with treasury operations. Similarly,
activity pertaining to money at call and short notice is handled by treasury department
of the bank at head office level.
Banks have a robust system of internal controls pertaining to cash like joint custody of
two responsible officers, checking of cash at periodic intervals etc due to higher risk
of misappropriation. Similarly, the balance with other banks (in case of applicable
branches) are reconciled periodically. The auditor has to be satisfied about effective
operation and implementation of internal controls in this area.
Audit Procedures:
Area of Focus Suggested Audit Procedures
Cash • Carry out the physical verification of cash (including foreign
currency, if any, cash at ATM and cash at cash deposit
machines) as close to the balance sheet date as possible.
Example 3
FT Cooperative Bank lent housing loan of ` 1 crore to Rahul Dave, for an under
construction flat. The project was still incomplete and the builder absconded. It turned out
that the builder had taken a loan from another bank for the entire property on the basis of
an equitable mortgage. Since equitable mortgage is not registered, FT bank was unable to
trace the loan taken by the builder and therefore the borrower Rahul and FT bank both
suffered.
It would be a better idea to first approve the builder after thoroughly examining his
credentials, past performances etc., and then only consider giving loans to buyers of his
flats to minimize such risks. In fact many banks nowadays do this. Somehow FT Coop bank
did not take the precaution and landed in trouble. Further, CIBIL records of the builder also
could have been checked. Loan sanctioning should not become a mere “tick the box”
process.
Verification of asset classification, income recognition and Provision for Non-performing
assets: An important aspect of audit of advances relates to their asset classification and
provisioning (for provisioning norms refer Chapter 12 of Intermediate Auditing & Assurance Study
Module). This implies that advances are classified in accordance with prudential norms on asset
classification, income is recognized on actual record of recovery and a proper provision should be
made in respect of advances where the recovery is doubtful.
Audit approach
The Reserve Bank has prescribed objective norms for determining the quantum of provisions
required in respect of advances. The auditors must take / download the latest Master Circular of
RBI to familiarise himself fully with the norms prescribed by RBI in this regard. The circulars issued
by RBI after the date of issue of Master Circular and till the date of audit should also be taken /
downloaded and reviewed by the auditors for its adherence. However, these norms should be
construed as laying down the minimum provisioning requirements and wherever a higher provision
is warranted in the context of the threats to recovery, such higher provision should be made.
In this regard, the provisions of section 15 of the Banking Regulation Act, 1949 may be noted. This
section, which applies to banking companies, nationalised banks, State Bank of India and regional
rural banks, requires the bank concerned to make adequate provision for bad debts to the
satisfaction of its auditor before paying any dividends on its shares.
It may be noted that verification of applicable prudential norms on asset classification, income
recognition and provisioning is an important responsibility of statutory branch auditor as well as
statutory central auditor.
Area of Focus Suggested Audit Procedures
Classification • Verify whether bank has a system of ongoing identification and
and Provision classification of advances through CBS without manual
intervention and its accuracy in crystallising date of NPA.
• Examine whether the classification made by the branch is
appropriate. Particularly, examine the classification of advances
where there are threats to recovery.
• Examine whether the secured and the unsecured portions of
advances have been segregated correctly and provisions have been
calculated properly.
• Review and compare the date of NPA of loan accounts
mentioned in current year statements with that of previous year.
Reasons for any change should be ascertained.
Accounts As per the Reserve Bank guidelines, if an account has been regularised
regularized near before the balance sheet date by payment of overdue amount through
Balance sheet genuine sources, the account need not be treated as NPA. Where,
date subsequent to repayment by the borrower (which makes the account
regular), the branch has provided further funds to the borrower (including
by way of subscription to its debentures or in other accounts of the
borrower), the auditor should carefully assess whether the repayment was
out of genuine sources or not. Where the account indicates inherent
weakness based on the data available, the account should be deemed as
NPA. In other genuine cases, the banks must furnish satisfactory evidence
to the Statutory Auditors about the manner of regularisation of the account
to eliminate doubts on their performing status.
Provisioning The auditor should check the latest RBI Circulars in this regard. It is be
Towards understood that provision for standard assets is also required to be
Standard made at variable rates in respect of different sectors for the funded
Assets outstanding in accordance with RBI norms as a matter of prudence.
The provisions need to be checked in detail with the statement of
advances. The bifurcation of standard advances under relevant category
for proper calculation of provision should be checked and certified at
branches level. The definition of respective items specified should be
adhered as defined by RBI.
Restructured Restructuring is an act in which a lender, for economic or legal
Advances reasons relating to borrower’s financial difficulty, grants concessions
to the borrower. It may involve modification of terms of advances
including alteration of amount of instalments/alteration of repayment
period/rate of interest/sanction of additional credit facilities etc. to
help in curing of default.
RBI has given revised guidelines for treatment of restructured accounts by
its circular. The auditor should verify compliance with the requirements of
the circular issued in this regard.
Banks may restructure the accounts classified under standard,
substandard or doubtful categories. Banks cannot restructure
accounts with retrospective effect. Once the bank receives an
application/proposal in respect of an account for restructuring, it implies
that the account is intrinsically weak. Accordingly, during the time the
account remains pending for restructuring, the auditors need to take a view
whether provision needs to be made in respect of such accounts, pending
approval for restructuring.
On restructuring, the account will be downgraded from Standard to
substandard. NPAs will remain in the same category.
Upgradation of Examine all the accounts upgraded from NPA to standard category during
Account the year, to ensure that the upgrading of each account is strictly in terms
of RBI guidelines. There can be a possibility of incorrect upgradation
of account on the basis of partial recoveries made in the account and
overdue portion might not have wiped out completely. There can also
be a possibility of recoveries being made in the account after cut-off
date and account being upgraded as on date of balance sheet.
Sale/ Purchase In case of Sale/Purchase of NPA by Bank, the auditor should examine
of NPAs • the policy laid down by the Board of Directors in this regard relating to
procedures, valuation and delegation of powers including non
performing financial assets that may be purchased/sold, norms or
such purchase/sale, valuation procedure and accounting policy.
• only such NPA has been sold which has remained NPA in the
books of the bank for at least 2 years.
• the assets have been sold/ purchased “without recourse’ only.i.e
the entire credit risk associated with the non-performing asset
should be transferred to the purchasing bank.
• subsequent to the sale of the NPA, the bank does not assume any
legal, operational or any other type of risk relating to the sold NPAs.
• the NPA has been sold at cash basis only. Under no
circumstances, NPA can be sold to another bank at a
contingent price .The entire sale consideration has to be
received on upfront basis.
• the bank has not purchased an NPA which it had originally sold.
In case of sale of an NPA, the auditor should also ensure that:
• on the sale of the NPA, the same has been removed from the books
of the account of selling bank on transfer;
• If the sale is at a price below the net book value (NBV) (i.e., book
value less provisions held), the shortfall should be debited to the
profit and loss account of that year.
• If the sale is for a value higher than the NBV, the excess provision
shall not be reversed but will be utilised to meet the shortfall/ loss
on account of sale of other non-performing financial assets.
Similarly, in case of purchase of NPAs, the auditor should verify that:
• the NPA purchased has been subjected to the provisioning
requirements appropriate to the classification status in the books of
the purchasing bank.
• any recovery in respect of an NPA purchased from other banks is
first adjusted against its acquisition cost and only the recovered
amount in excess of the acquisition cost has been recognised as
profit.
• for the purpose of capital adequacy, banks have assigned 100%
risk weights to the NPAs purchased from other banks.
IV. FIXED ASSETS
The Third Schedule to the Banking Regulation Act, 1949 requires fixed assets to be classified into
two categories in the balance sheet, viz., Premises and Other Fixed Assets. Premises wholly or
partly owned by the banking company for the purpose of business including residential premises
used by employees of bank are shown under the head “Premises”. Other fixed assets include
furniture & fixture, motor vehicles, computers, office equipment etc. Though not specifically
mentioned under the Banking Regulation Act, 1949, the assets taken on lease and intangible
assets should be shown separately for proper classification and disclosure and also to comply with
the requirements of the Accounting Standards (ASs).
Section 9 of the Banking Regulation Act, 1949, prohibits a banking company from holding any
immovable property, howsoever acquired (i.e., whether acquired by way of satisfaction of claims or
otherwise), for a period exceeding seven years from the date of acquisition, except such as is
required for its own use.
Audit Approach : In most of the banks, fixed assets are generally purchased by the head
office or regional/zonal offices. Statutory branch auditor has to ascertain the procedure
followed and plan accordingly. In most of the banks, maintenance of records is centralized
at head office level. In some of the banks, information relating to purchase, sale of fixed
assets is accounted for with help of Fixed asset management software. The audit
procedures have to be designed accordingly.
Audit Procedures
In carrying out the audit of fixed assets, the auditor is concerned primarily with obtaining evidence
about their ownership, existence and valuation. For this purpose, the auditor should review the
following:
Area of Focus Suggested Audit Procedures
Internal Examine the system of internal controls broadly covering the following:
Controls • Control over expenditures incurred on fixed assets acquired or self-
constructed.
• Accountability and utilisation controls.
• Information controls for ensuring availability of reliable information
about fixed assets.
• Ascertain whether the accounts in respect of fixed assets are
maintained at the branch or centrally.
• Ascertain the location of documents of title or other documents
evidencing ownership of various items of fixed assets.
• Examine whether acquisitions, disposals, etc. effected at the branch
during the year have been properly communicated to the head office.
Premises • Verify the opening balance of premises with reference to schedule of
fixed assets, ledger or fixed assets register.
V. OTHER ASSETS: The auditor may carry out the audit of various items appearing under the
head ‘other assets’ in the following manner:
Audit Procedures
Area of Focus Suggested Audit Procedures
Inter-Office Examine whether Inter-branch accounts are normally reconciled at the
Adjustments central level. The auditor should report on the year-end status of inter-branch
accounts indicating the dates up to which all or any segments of the accounts
have been reconciled. The auditor should also indicate the number and
amount of outstanding entries in the inter branch accounts, giving the
relevant information separately for debit and credit entries. The auditor
should ensure that any discrepancies found in inter-branch accounts have
been properly dealt with in the books. The auditor can obtain the relevant
information primarily from branch audit reports.
Interest • Examine whether the interest has been accrued on the entire loans
Accrued and advances portfolio of the bank. Special consideration should be
given to the overdue bills purchased/discounted.
• Ensure that only such interest as can be realised in the ordinary
course of business should be shown under this head. This is based
on the principle, recognised in AS 9, that revenue cannot be
recognised if there is a significant uncertainty about its collectability.
Tax Paid in • Ensure that the certificates for such tax deducted at source is
Advance/Tax collected by the branch and the original copy is sent to the Head
Deducted at Office along with the transfer of such Tax Deducted at Source (TDS)
Source amount to Head Office on periodic basis as defined.
• TDS Certificates / credits in the form 26AS, and claim of the same in
Income Tax returns filed should be checked to ensure the justification
of the claim towards such certificates.
• At Head Office level, the availability of all the TDS Certificates /
credits in the form 26 AS, and claim of the same in Income Tax
returns filed should be checked to ensure the justification of the claim
towards such certificates.
Stationery and • Ensure that the item “Stationery and Stamps” includes only
Stamps exceptional items of expenditure on stationery like bulk
purchase of security paper which is to be written off over a
period of time. Such items should be valued at cost. Normal
expenditure on stationery is charged to profit & loss account.
Therefore, this item may not appear at branch level as
considerable part of stationery is supplied to branches by head
office.
• Evaluate the existence, effectiveness and continuity of internal
controls over these items in the normal course of audit. It may be
noted that the branch auditor is required to specifically comment on
the adequacy of the relevant internal controls in the LFAR.
• Physically verify the stationery and stamps on hand as at the year-end,
especially stationery of security items. Any shortage should be inquired
into as it could expose the bank to a potential loss from misuse.
• Examine whether the cost of stationery and stamps consumed during
the year has been properly charged to the profit and loss account for
the year in the context of the accounting policy/instructions from the
head office regarding treatment of cost of stationery and stamps.
Non-Banking • Ensure that the heading includes those immovable
Assets properties/tangible assets which the bank has acquired in
Acquired in satisfaction of debts due or its other claims and these are being
Satisfaction of held with intention of being disposed off.
Claims
• Verify such assets with reference to the relevant documentary
evidence, e.g., terms of settlement with the party, order of the Court
or the award of arbitration, etc.
• Check that the ownership of the property is legally vested with the
bank. If there is any dispute or other claim about the property, the
VI. OTHERS
This is the residual heading, which will include items not specifically covered under other sub-
heads, e.g., claims which have not been received, debit items representing additions to assets or
reductions in liabilities which have not been adjusted for technical reasons or want of particulars,
etc., receivables on account of government business, prepaid expenses, accrued income other
than interest (e.g., dividend declared but not received) may also be included under this head. The
audit procedures relating to some of the major items included under this head are discussed
below:
Audit Approach and Procedures
Area of Focus Suggested Audit Procedures
Non-Interest- • Examine non-interest-bearing staff advances with reference to the
Bearing Staff relevant documentation and the policy in this regard which is framed
Advances by the bank. The availability, enforceability and valuation of security, if
any, should also be examined.
• Ensure that the same relates to employees on the rolls of the bank on
the date of the preparation of financial statements.
Loans and • The auditor should verify that loans have been ordinarily sanctioned by
Advances to the next higher sanctioning authority as compared to the recipient of loan.
Officials and • Loans to senior officers or of higher amount should have been
Relatives reported to the Board.
Security • Examine security deposits with various authorities (e.g., on account of
Deposits telephone, electricity, etc.,) and with others (e.g., deposits in respect
of premises taken on rent) with reference to documents containing
relevant terms and conditions, and receipts obtained from the parties
concerned.
• Ensure that the deposit amount has not become due as per the terms
and conditions. If it is so, then the recoverability of the same needs to
Capital Adequacy: The term ‘capital adequacy’ is used to describe the adequacy of capital
resources of a bank in relation to the risks associated with its operations.
Adequacy of capital of banks has been the subject matter of consideration by banking authorities
around the world for several decades. An international agreement on a common risk-based capital
framework and definition of bank capital was framed by the Committee on Banking Regulations
and Supervisory Practices of the G-1O Nations (popularly known as the Basel Committee) and
was formally adopted in 1988. Basel accords and frameworks were borne out of these
deliberations.
The framework attempted to relate a bank’s capital needs to its risk profile. Besides serving to
strengthen the soundness and stability of the banking system, it also sought to give banks an
incentive to hold lower-risk assets, incorporate off-balance sheet exposures explicitly into capital
assessments, and achieve greater uniformity in application of capital standards to banks across
different countries.
capital adequacy of scheduled commercial banks (other than regional rural banks). The Master
Circular on “Prudential Guidelines on Capital Adequacy and Market Discipline- New Capital
Adequacy Framework (NCAF)”, provides the guidelines to be followed by banks for capital
adequacy. Some of the important aspects of the circular are covered below.
The basic approach of capital adequacy framework is that a bank should have sufficient capital to
provide a stable resource to absorb any losses arising from the risks in its business. Capital is
divided into tiers according to the characteristics/qualities of each qualifying instrument. For
supervisory purposes capital is split into two categories: Tier I and Tier II, representing different
instruments’ quality as capital.
♦ Tier I capital consists mainly of share capital and disclosed reserves and it is a bank’s
highest quality capital because it is fully available to cover losses.
♦ Tier II capital consists of certain reserves and certain types of subordinated debt. The loss
absorption capacity of Tier II capital is lower than that of Tier I capital.
Components of Capital: The Master Circular on Capital Adequacy discusses the Capital Funds in
two categories – capital funds for Indian banks and capital funds of foreign banks operating in
India.
In case of foreign banks operating in India, RBI’s Master Circular on Capital Adequacy also lays
down certain additional provisions in respect of capital to be followed by such banks.
Capital Risk Adequacy Ratio (CRAR): The CRAR is computed as follows:
_______________Eligible Total Capital Funds______________ x 100
Risk weighted assets and off-balance sheet items
The RBI requires banks to maintain a minimum CRAR of 9 per cent on an ongoing basis. The
Master Circular on Capital Adequacy contains detailed guidelines on calculation of risk weighted
assets and off-balance sheet items for CRAR.
5. For secured housing loans upto ` 75 lakh, the risk weight, subject to some
conditions is 50%.for those above ` 75 lakhs, it is 75%, for loans to commercial real
estate , it is 100%.Thus for a housing loan of ` 60 lakh given by the bank, the risk
weighted asset will be taken at 60 x 50% = Rs.30 lakhs for the purpose of the
denominator in the above formula.
II. RESERVES AND SURPLUS
The following are required to be disclosed in the balance sheet under the head ‘Reserves and
Surplus’.
Revenue and Other Reserves including Balance in Profit and Loss Account
investment Fluctuation Reserve*
*In respect of these items above, opening balance, additions during the year and deductions
during the year are to be shown separately in respect of each item
Audit Approach and Procedures
The auditor should verify the opening balances of various reserves with reference to the audited
balance sheet of the previous year. Additions to or deductions from reserves should also be
verified in the usual manner, e.g., with reference to board resolution. In the case of statutory
reserves and share premium, compliance with legal requirements should also be examined. Thus,
the auditor should specifically examine whether the requirements of the governing legislation
regarding transfer of the prescribed percentage of profits to reserve fund have been complied with.
In case the bank has been granted exemption from such transfer, the auditor should examine the
relevant documents granting such exemption. Similarly, it should be examined whether the
appropriations from share premium account conform to the relevant legal requirements.
Compliance with foreign laws in respect of overseas branches, need to be verified by the auditor.
III. DEPOSITS
Audit Approach
Deposits represent the important source of funds for banks. In carrying out audit of deposits and
liabilities, the auditor is primarily concerned with obtaining reasonable assurance that all known
liabilities are recorded and stated at appropriate amounts.
The following areas should be considered when auditing Deposits:
Remember that deposits accepted by banks are primarily of two types i.e those repayable on
demand and those repayable after a fixed term. Current and saving accounts are the most
common form of demand deposits. Term deposits (fixed deposits etc. known under different
nomenclature in different banks) are repayable after a specified period of time ranging from 7 days
at present to say one year or five years. Recurring deposits are also an important variant of term
deposits in which a specified sum is deposited in the account at regular intervals for a pre-
determined period. At maturity, proceeds are repaid to depositors along with interest.
Deposits designated in foreign currencies e.g. Foreign currency non-resident deposits(FCNR) are
accounts which are opened by Non-resident Indians in form of fixed deposit only.
Besides, there are some accounts like NRE [Non-Resident (External)Rupee account scheme] and
NRO [Non-Resident Ordinary Rupee account scheme]. NRE accounts may be opened by Non-
Resident Indians and persons of Indian origin. NRO accounts may be opened by all non-residents.
These accounts may be maintained in form of savings, current, recurring or fixed deposit and are
denominated in Indian Rupees.
Deposits would be appearing in balance sheet of most of the branches. Hence, these are of
concern to auditors at branch and central/head office level.
Audit Procedures:
The auditor may verify various types of deposits in the following manner:
Area of Focus Suggested Audit Procedures
Current and • Verify on a sample basis current account and saving accounts
saving opened during the year for adherence to KYC norms. Verify that
accounts saving accounts are opened in name of individuals, HUF, some
approved institutions like trusts, educational institutes etc.
Remember that saving accounts are not opened for business or
professional concern. The business transactions are carried in
current accounts which can be opened for all kind of customers
like companies, individuals, partnership firms etc.
• Verify the balances in individual accounts on a sample basis.
• Check the calculations of interest on a test check basis. Remember
that no interest is paid generally on current accounts by banks.
• Examine whether the procedure for obtaining balance confirmation
periodically has been followed consistently. Examine, on a sampling
basis, the confirmations received.
• Ensure that debit balances in current accounts are not netted out on
the liabilities side but are appropriately included under the head
‘advances’.
• Inoperative accounts (both current and saving) are a high-risk area
of frauds in banks. As per RBI guidelines, a savings/ current
account should be treated as inoperative/dormant if there are no
transactions in the account for over a period of two years. Verify on
a sample basis some of inoperative accounts revived/closed during
the year. Ensure that inoperative accounts are revived only with
proper authority. In this regard, cases where there is significant
reduction in balances of such accounts as compared to previous
year, examine authorisation for withdrawals.
Term deposits • Examine whether the deposit receipts and cash certificates are
issued serially and all of them are accounted for in the registers.
• Verify in case of bulk deposits (Rs.2 crore and above for
scheduled commercial banks presently), correct rate of interest
has been offered.
• In case of closure of term deposit, test check whether required
foreclosure penalty has been deducted from applicable rate of
interest payable.
• Verify on sample basis some of recurring deposit accounts
opened during the year.
• Verify correctness of rate of interest on term deposits on sample
basis.
Deposits • Verify some of FCNR accounts opened during the year on
designated in sample basis and ensure these conform to RBI directions.
foreign • Verify on sample basis permissible credits and debits in FCNR
currencies accounts as per RBI directions.
• In case of FCNR accounts, examine whether these have been
converted into Indian Rupees at rate notified in this behalf by
head office.
• Examine whether any resultant increase or decrease has been taken
to the profit and loss account.
• Verify that interest on deposits has been paid on the basis of 360
days in a year.
Others • In case of NRE and NRO accounts, verify on a sample basis
credits and debits as per RBI guidelines. Also check
repatriablity. NRE accounts are repatriable whereas NRO
accounts are not repatriable except for all current income
subject to certain conditions.
General • Verify that deposits of a bank are not inflated for purpose of
balance sheet presentation. For example, some customers might
be given overdrafts near date of balance sheet and the resultant
overdrawn amounts may be placed as deposits with banks and
further advances may be given on strength and security of these
deposits. It would lead to inflated deposits as well as advances.
The transactions may be reversed after close of the year.
In such cases which indicate the possibility of window-dressing,
the auditor should consider making a suitable qualification in
main audit report besides other applicable reporting.
• Examine that interest accrued but not due on deposits is not included
under the relevant deposits but is shown under the head ‘other
liabilities and provisions’.
The total amount of secured borrowings included under the above heads is to be shown by way of
a note to the relevant schedule. Secured borrowings for this purpose include borrowings/refinance
in India as well as outside India. It may be noted that the inter-office transactions are not
borrowings and therefore, should not be presented as such.
Audit Procedures:
Area of Focus Suggested Audit Procedures
Borrowings • Obtain and verify confirmation certificates and other supporting
documents such as, agreements, correspondence, etc.
• External confirmations received directly by the auditor from
appropriate confirming parties may assist the auditor in obtaining
audit evidence that the auditor requires to respond to significant risks
of material misstatement. The auditor is required to comply with the
requirements of SA 505 “External Confirmations” which contains
guidance on designing and performing external confirmation
procedures to obtain relevant and reliable audit evidence.
• Examine whether a clear distinction has been made between
‘rediscount’ and ‘refinance’ for disclosure of the amount under the
above head since rediscount does not figure under this head.
• Examine whether borrowings of money at call and short notice are
properly authorised. The rate of interest paid/payable on, as well as
duration of such borrowings should also be examined by the auditor.
• Examine the relevant correspondence or other documents to ensure
that the branch has been authorised by the Head Office to
borrow/retain other borrowings and that the terms on which
borrowings have been made are in accordance with the
authorisation.
• Examine whether the amount shown in the branch accounts is
properly classified based on security or otherwise.
Others It may be noted that the figure of advances and investments in the balance
(Including sheet of a bank excludes provisions in respect thereof made to the
Provisions) satisfaction of auditors. The auditor should examine other provisions and
other items of liabilities in the same manner as in the case of other entities.
VI. CONTINGENT LIABILITIES
Contingent Liabilities
Audit Approach
In respect of contingent liabilities, the auditor is primarily concerned with seeking
reasonable assurance that all contingent liabilities are identified and properly valued. The
auditor should obtain representation from management that:-
(i) all off-balance sheet transactions have been accounted in the books of accounts as
and when such transaction has taken place;
(ii) all off balance sheet transactions have been entered into after following due
procedure laid down;
(iii) all off balance sheet transactions are supported by the underlying documents;
(iv) all year end contingent liabilities have been disclosed;
(v) the disclosed contingent liabilities do not include any crystallised liabilities which are
of the nature of loss/ expense and which, therefore, require creation of a
provision/adjustment in the financial statements;
(vi) the estimated amounts of financial effect of the contingent liabilities are based on the
best estimates in terms of Accounting Standard 29, including consideration of the
possibility of any reimbursement;
(vii) in case of guarantees issued on behalf of the bank’s directors, the bank has taken
appropriate steps to ensure that adequate and effective arrangements have been
made so that the commitments would be met out of the party’s own resources and
that the bank will not be called upon to grant any loan or advances to meet the
liability consequent upon the invocation of the said guarantee(s) and that no violation
of section 20 of the Banking Regulation Act, 1949 has arisen on account of such
guarantee; and
(viii) such contingent liabilities which have not been disclosed on account of the fact that
the possibility of their outcome is remote include the management’s justification for
reaching such a decision in respect of those contingent liabilities
Audit procedures
To this end, the auditor should, generally follow the audit procedures given below:
Area of Focus Suggested Audit Procedures
Contingent • Ensure that there exists a system whereby the non-fund based
Liabilities facilities or additional/ad hoc credit facilities to parties are
extended only to their regular constituents, etc.
• Ascertain whether there are adequate internal controls to
ensure that transactions giving rise to contingent liabilities are
executed only by persons authorised to do so and in
accordance with the laid down procedures.
• Verify in case of LCs for import of goods, the payment to the overseas
suppliers is made based on shipping documents and after ensuring
that the said documents are in strict conformity with the terms of LCs.
• Ascertain whether the accounting system of the bank provides
for maintenance of adequate records in respect of such
obligations and whether the internal controls ensure that
contingent liabilities are properly identified and recorded.
• Test the completeness of the recorded obligations.
• Review the reasonableness of the year-end amount of
contingent liabilities in the light of previous experience and
knowledge of the current year's activities.
• Review whether comfort letters issued by the bank has been
considered for disclosure of contingent liabilities.
• Examine whether the bank has given any guarantees in respect
of any trade credit (buyer’s credit or seller’s credit) and the
period of guarantees is co-terminus with the period of credit
reckoned from the date of shipment.
• Verify whether bank has extended any non-fund facility or
additional/ad hoc credit facilities to other than its regular
customers. In such cases, auditor should ensure concurrence of
existing bankers of such borrowers and enquire regarding
financial position of those customers.
Claims Against the • Examine the relevant evidence, e.g., correspondence with
Bank Not lawyers/ others, claimants, workers/officers, and
Acknowledged as workmen’s/officers’ unions.
Debts • Review the minutes of meetings of board of
directors/committees of board of directors, contracts,
agreements and arrangements, list of pending legal cases, and
correspondence relating to taxes, and duties, etc. to identify
claims against the bank.
• Ascertain from the management the status of claims
outstanding as at the end of the year.
• A review of subsequent events would also provide evidence
about completeness and valuation of claims.
Liability on • Verify the outstanding forward exchange contracts with the statement
Account of of outstanding forward exchange contracts generated from the
Outstanding bank’s computerised accounting system or manual register
Forward Exchange maintained by the branch. The auditor may physically verify the
Contracts & underlying documents including confirmations from merchants
derivative to test the existence of such outstanding contracts.
contracts • The auditor may verify outstanding derivative contracts like
options, interest rate swaps etc with reports generated in this
regard.
Guarantees Given • Ascertain whether there are adequate internal controls over
on Behalf of issuance of guarantees, e.g., whether guarantees are issued
Constituents under proper sanctions, whether adherence to limits sanctioned
for guarantees is ensured, whether margins are taken from
customers before issuance of guarantees as per the prescribed
procedures, etc.
• Ascertain whether there are adequate controls over unused
guarantee forms, e.g., whether these are kept under the
custody of a responsible official, whether a proper record is kept
of forms issued, whether stock of forms is periodically verified
and reconciled with the book records, etc.
• Examine the guarantee register to seek evidence whether the
prescribed procedure of marking off the expired guarantees is
being followed or not.
• Check the relevant guarantee registers with the list of
outstanding guarantees to obtain assurance that all outstanding
guarantees are included in the amount disclosed in this behalf.
• Examine that expired guarantees are not included in this head.
Verify guarantees with the copies of the letters of guarantee
issued by the bank and with the counter-guarantees received
from the customers. The auditor should also verify the securities
Example 4:
A large scam happened at ABC bank wherein the employees, in collusion with an unscrupulous
businessman, misused the SWIFT network to transmit messages to other banks on fund
requirement. While all this was done using SWIFT passwords, the transactions were never
recorded in the bank’s core system, thereby keeping the bank management in the dark for
years. No securities were being obtained. It caused loss of thousands of crores to the bank.
Thus, it is important to give proper importance to the recording and disclosure of contingent
liabilities even though they do not form part of the main balance sheet or at the most appear on
both assets as well as liabilities side with equal amounts as contra items.
NOTE: Verification of revenue items is covered in detail at Intermediate level. Students may refer
Chapter 12 of CA Intermediate Auditing and Assurance Study Material.
9. AUDITOR'S REPORT
In the case of a nationalised bank, the auditor is required to make a report to the Central
Government in which the auditor should state the following:
The report of auditors of State Bank of India is also to be made to the Central Government and is
almost identical to the auditor’s report in the case of a nationalised bank.
Whether, in the auditor’s opinion, the balance sheet is a full and fair balance sheet
containing all the necessary particulars and is properly drawn up so as to exhibit a true and
fair view of the affairs of the bank.
In case the auditor had called for any explanation or information, whether it has been given and
whether it is satisfactory.
Whether or not the transactions of the bank, which have come to the auditor’s notice, have
been within the powers of that bank.
Whether or not the returns received from the offices and branches of the bank have
been found adequate for the purpose of audit.
Whether the profit and loss account shows a true balance of profit or loss for the period
covered by such account.
Any other matter which the auditor considers should be brought to the notice of the Central
Government.
(ii) Whether the management has represented, that, to the best of it’s knowledge
and belief, other than as disclosed in the notes to the accounts, no funds have
been received by the company from any person(s) or entity(ies), including
foreign entities (“Funding Parties”), with the understanding, whether recorded
in writing or otherwise, that the company shall, whether, directly or indirectly,
lend or invest in other persons or entities identified in any manner whatsoever
by or on behalf of the Funding Party (“Ultimate Beneficiaries”) or provide any
guarantee, security or the like on behalf of the Ultimate Beneficiaries; and
(iii) Based on such audit procedures that the auditor has considered reasonable
and appropriate in the circumstances, nothing has come to their notice that
has caused them to believe that the representations under sub-clause (i) and
(ii) contain any material mis-statement.
(5) Whether the dividend declared or paid during the year by the company is in
compliance with section 123 of the Companies Act, 2013.
(6) [Whether the company, in respect of financial years commencing on or after the 1st
April, 2022,] has used such accounting software for maintaining its books of account
which has a feature of recording audit trail (edit log) facility and the same has been
operated throughout the year for all transactions recorded in the software and the
audit trail feature has not been tampered with and the audit trail has been preserved
by the company as per the statutory requirements for record retention.]
Further, as per sub-section 12 of section 143 of the Companies Act, 2013, if an auditor of a
company, in the course of the performance of duties as auditor, has reason to believe that an
offence of fraud involving such amount or amounts as may be prescribed, is being or has been
committed in the company by its officers or employees, the auditor shall report the matter to the
Central Government within such time and in such manner as may be prescribed.
It must be noted that auditor is not expected to consider each and every transaction but to
evaluate the system as a whole. Therefore, if the auditor while performing normal duties comes
across any instance, he/she should report the matter to the RBI in addition to Chairman/Managing
Director/Chief Executive of the concerned bank.
[Note: For detailed understanding on duty to report on fraud under Companies Act, 2013, students
may refer Chapter-5 (The Company Audit) of this Study Material]
Deposits Advances
The broad areas of coverage under concurrent audit shall be based on the identified risk of the
unit and must include random transaction testing of sufficiently large sample of such
transactions wherever required.
8. While auditing FAIR Bank, you observed that a lump sum amount has been disclosed as
contingent liability collectively. You are, therefore, requested by the management to guide
them about the disclosure requirement of Contingent Liabilities for Banks. Kindly guide.
9. ABC Chartered Accountants have been appointed as concurrent auditors for the branches
of Effective Bank Ltd. for the year 2019-20. You are part of the audit team for Agra branch
of the bank and have been instructed by your senior to verify the advances of the audit
period. You are required to guide your assistant about the areas to be taken care while
doing verification during the concurrent audit.
10. In the course of audit of Skip Bank Ltd., you found that the Bank had sold certain of its non-
performing assets. Draft the points of audit check that are very relevant to this area of
checking.
11. Banks, because of certain characteristics, are distinguished from other commercial
enterprises and hence it needs special audit consideration. As an auditor of a bank, specify
the various peculiarities which may necessitate special audit consideration to be taken care
by you?
12. ABC Bank had sanctioned credit limits of Rs.100 lakh to M/s Volkart Ltd on 1 st September
2018. The renewal of limits was due on 1st September 2019. While doing the statutory
branch audit for the year ended 31st March 2020, you find that the renewal has not been
done even though 180 days are over. The bank says that the renewal process has been
initiated on time and most of the document are received. The account is operated regularly
and is in order; balance is maintained within drawing power. It also shows a letter from
Volkart stating that due to a sudden death of their auditor, a new auditor had to be
appointed. Procedure for appointment took some time and the new auditor was doing the
audit all over again. The limit was not renewed till 31/3/2020. However, the audited
financials are received on 10th April 2020 and the renewal letter was issued immediately.
Your assistant is insisting that the account must be classified as NPA since the limit was not
renewed as on 31/3/2020. What is your opinion?
13. You are auditing a small bank branch with staff strength of the manager, cashier and three
other staff S1 ,S2 and S3. Among allocation of work for other areas, S1 who is a peon also
opens all the mail and forwards it to the concerned person. He does not have a signature
book so as to check the signatures on important communications. S2 has possession of all
bank forms (e.g. Cheque books, demand draft/pay order books, travelers’ cheques, foreign
currency cards etc.). He maintains a record meticulously which you have test checked also.
However, no one among staff regularly checks that. You are informed that being a small
branch with shortage of manpower, it is not possible to always check the work and records.
Give your comments.
(i) The auditor should inspect the policies and see whether they are assigned to
the bank and whether such assignment has been registered with the insurer.
(ii) The auditor should also examine whether premium has been paid on the
policies and whether they are in force.
(iii) Certificate regarding surrender value obtained from the insurer should be
examined.
(iv) The auditor should particularly see that if such surrender value is subject to
payment of certain premium, the amount of such premium has been deducted
from the surrender value.
5. The bank is a consortium member of cash credit facilities of ` 50 crores to X Ltd. Bank's
own share is ` 10 crores only. During the last two quarters against a debit of
` 1.75 crores towards interest, the credits in X Ltd.’s account are to the tune of
` 1.25 crores only. Sometimes, several banks form a group (the 'consortium') under the
leadership of a 'lead bank' to make advance to a large customer on same conditions and
security with proportionate rights. In such cases, each bank may classify the advance given
by it according to its own experience of recovery and other factors. Since in the last two
quarters, the amount remains outstanding and, thus, interest amount should be reversed.
This is despite the certificate of lead bank to classify that the account as performing.
Accordingly, the amount should be shown as non-performing asset.
6. Refer Para 5.
7. Refer Para 10.4.
8. Refer Para 8 - Part (VI)
9. Refer Para 7 sub heading III
10. Refer Para 7 sub heading III
11. Refer Para 1
12. As per Guidelines of Reserve Bank of India the account should be classified as NPA if
renewal is not done in 180 days. However, in the present case, operations in the account
are excellent. The bank has shown a letter from that company that due to certain reasons
the audited financial statements are delayed. Further, the limit has been renewed before
signing the audit report.
Thus, even if the sanction was issued after the balance sheet date, it relates to the
position as on the balance sheet date. Therefore, it is an adjusting event under AS 4,
Contingencies and Events Occurring After the Balance Sheet Date. It is also a matter of
substance over form.
The auditor would consider classifying the account as a standard asset.
13. Banks are required to implement and maintain a system of internal controls for mitigating
risks, maintain good governance and to meet the regulatory requirements. Given below
are examples of internal controls that are violated in the given situation:
In the instant case, S1 who is a peon opens all the mail and forwards it to the concerned
person. Further, he does not have a signature book so as to check the signatures on
important communications is not in accordance with implementation and maintenance of
general internal control. As the mail should be opened by a responsible officer. Signatures
on all the letters and advices received from other branches of the bank or its
correspondence should be checked by an officer with the signature book.
All bank forms (e.g. Cheque books, demand draft/pay order books, travelers’ cheques,
foreign currency cards etc.) should be kept in the possession of an officer, and another
responsible officer should verify the issuance and stock of such stationery. In the given
case, S2 has possession of all bank forms (e.g. cheque books, demand draft/pay order
books, travelers’ cheques, foreign currency cards etc.). He maintains a record
meticulously which were also verified on test check basis.
Further, contention of bank that being a small branch with shortage of manpower they are
not able to check the work and records on regular basis, is not tenable as such lapses in
internal control pose risk of fraud.
The auditor should report the same in his report accordingly.