Company Law
63 Audit and Auditors
THE LEGAL BRIDGE
Topic 63 — Audit and Auditors
Companies Act, 2013 — Sections 139–148, NFRA, and Liability
I. Conceptual Foundation: The Auditor as Public Watchdog
If the directors are the stewards of the company's assets, the auditor is the steward of truth. The audit profession exists because shareholders, creditors, regulators, tax authorities, and the public cannot personally inspect a company's books — they must rely on the certified opinion of an independent professional. The auditor's report is therefore not a private letter to management; it is a public document on which the global financial economy depends.
The Companies Act, 2013, in Sections 139 to 148, provides a comprehensive framework for the appointment, qualifications, duties, rotation, removal, and liability of auditors. The 2013 Act significantly tightened the regime over the 1956 Act — driven by the Satyam scandal of 2009, which exposed the cosy arrangement between long-tenured auditors and management. Three pillars define the modern Indian audit regime: mandatory rotation (Section 139), fraud reporting (Section 143(12)), and the National Financial Reporting Authority — NFRA — under Section 132.
II. Eligibility and Qualifications — Section 141
§ Section 141 — Who May Be an Auditor Only a chartered accountant in practice, or a firm or LLP whose majority of partners practising in India are chartered accountants, may be appointed as an auditor of a company. Section 141(3) lists disqualifications: a body corporate other than an LLP; an officer or employee of the company; a relative or partner of an officer/employee; a person who is in full-time employment elsewhere; a person whose relative is a director or KMP; a person convicted of fraud and 10 years have not elapsed since conviction; etc. |
The qualifying authority for auditor practice is the Institute of Chartered Accountants of India (ICAI), constituted under the Chartered Accountants Act, 1949. Statutory disqualifications under Section 141(3) are absolute and self-operating — the auditor cannot waive them, nor can the company. Section 141(4) provides that any subsequent disqualification automatically vacates the auditor's office.
III. Appointment of Auditors — Section 139
A. First Auditor — Section 139(6) and (7)
In a non-government company, the first auditor must be appointed by the Board within 30 days of incorporation. If the Board fails, the members must appoint within 90 days at an EGM. The first auditor holds office until the conclusion of the first AGM. In a government company, Section 139(7) provides that the first auditor is appointed by the Comptroller and Auditor-General of India (CAG) within 60 days of incorporation; failing which, the Board within 30 days; failing which, the members within 60 days.
B. Subsequent Auditors — Section 139(1)
§ Section 139(1) — Five-Year Appointment Every company shall, at the first AGM, appoint an individual or firm as auditor who shall hold office from the conclusion of that meeting till the conclusion of its sixth annual general meeting and thereafter till the conclusion of every sixth meeting. The company shall place the matter relating to such appointment for ratification by members at every AGM. |
Note: The proviso for annual ratification at every AGM was originally in Section 139(1) but was omitted by the Companies (Amendment) Act, 2017 with effect from 7 May 2018. Today, the auditor is appointed for a term of five consecutive years and the matter is not required to be re-ratified annually.
C. Casual Vacancy — Section 139(8)
A casual vacancy in the office of auditor — caused by death, resignation, or disqualification — is filled by the Board within 30 days. Where caused by resignation, the appointment must be approved by the company at a general meeting within three months of the Board's recommendation. The auditor so appointed holds office only until the conclusion of the next AGM.
IV. Rotation of Auditors — Section 139(2) — The Anti-Cosiness Rule
§ Section 139(2) — Mandatory Rotation No listed company or other prescribed class of companies (Rule 5 of Companies (Audit and Auditors) Rules, 2014: unlisted public companies with paid-up capital ≥ ₹10 crore, private companies with paid-up capital ≥ ₹50 crore, and companies with public borrowings ≥ ₹50 crore) shall appoint or re-appoint: (a) an individual as auditor for more than one term of five consecutive years; (b) an audit firm as auditor for more than two terms of five consecutive years. |
After completion of the maximum tenure, the individual auditor or audit firm is barred for a cooling-off period of five years before being eligible to audit the same company again. The same restriction applies to the firm's network — i.e., a firm having a common partner or partners with the outgoing firm cannot step in immediately. The 2014 Rules give a transition window for compliance.
Joint Auditors and Rotation
Section 139(3) permits the company, by special resolution, to require that audit partners and team be rotated at intervals it specifies, or that audit be conducted by more than one auditor. Joint auditors are jointly and severally responsible for the audit work, but each is individually responsible for the work specifically allocated to him.
Class of Company | Maximum Tenure | Cooling-off |
|---|---|---|
Individual auditor — listed / prescribed | 1 term of 5 consecutive years. | 5 years before re-engagement. |
Audit firm — listed / prescribed | 2 terms of 5 consecutive years (10 years). | 5 years before re-engagement. |
Network firm having common partner with outgoing firm | Cannot be appointed during cooling-off period. | 5 years. |
Unlisted private companies below thresholds | Not subject to Section 139(2) — no mandatory rotation. | N/A. |
V. Powers, Duties, and Right to Information — Sections 143 and 145
A. Section 143(1) — Right of Access
Every auditor has a right of access at all times to the books of account and vouchers of the company, and is entitled to require from the officers of the company such information and explanations as he may consider necessary for the performance of his duties. Specific enquiries are mandated — whether loans and advances are properly secured; whether transactions represented as such are not personal; whether assets are not disposed of below cost; whether the balance-sheet truly reflects the state of affairs; etc.
B. Section 143(2) — Auditor's Report
The auditor must report to the members whether, in his opinion and to the best of his information and according to explanations given to him, the financial statements give a true and fair view of the state of affairs and of the profit/loss for the period. The report must state any reservations, qualifications, or adverse remarks, with reasons. The opinion is the most consequential paragraph in any annual report — it is what investors, lenders, and regulators read first.
C. Section 143(3) — Specific Reporting Matters
The report must specifically address: (a) whether the auditor has obtained all information and explanations; (b) whether proper books of account have been kept; (c) whether the balance sheet and P&L agree with the books; (d) whether the financial statements comply with accounting standards; (e) the directors' disqualification status under Section 164(2); (f) the adequacy of internal financial controls; (g) any other matter prescribed.
VI. Section 143(12) — The Fraud-Reporting Mandate
§ Section 143(12) — Reporting Fraud Notwithstanding anything contained in this section, if an auditor of a company in the course of the performance of his duties as auditor, has reason to believe that an offence of fraud involving such amount or amounts as may be prescribed is being or has been committed against the company by officers or employees of the company, he shall report the matter to the Central Government within such time and in such manner as may be prescribed. |
Section 143(12) — born of the Satyam scandal — converts the auditor from a passive observer to an active reporter. The mechanics under Rule 13 of the Audit Rules (substituted in 2018):
- Fraud involving ₹1 crore or more: report to the Central Government in Form ADT-4. The auditor first reports to the Audit Committee or Board within 2 days of knowledge, seeks reply within 45 days, and then forwards the report (along with the reply, or an indication of no reply) to the Central Government within 15 days of reply.
- Fraud below ₹1 crore: report to the Audit Committee or Board within 2 days; the matter is then disclosed in the Board's report under Section 134.
- The auditor's bona fide compliance with Section 143(12) is protected — no civil or criminal proceedings shall lie against him for such reporting (Section 143(13)).
- Failure to report invites penalty under Section 143(15): for listed companies, fine ranging from ₹5 lakh to ₹25 lakh; for others, ₹1 lakh to ₹25 lakh; the auditor may also face disciplinary action from ICAI.
✅ After the PNB-Nirav Modi disclosures (2018), Section 143(12) became the single most-discussed audit provision in India. Several Big-Four affiliates faced SFIO scrutiny for failure to report. The provision shifts the cost of silence onto the auditor. |
VII. Removal of Auditor — Section 140
The Companies Act, 2013 erects an unusual procedural fortress around the removal of an auditor — designed to insulate auditors from management retaliation for raising uncomfortable questions.
A. Removal Before Term — Section 140(1)
An auditor appointed under Section 139 may be removed before the expiry of his term only by a special resolution of the company, after obtaining prior approval of the Central Government in Form ADT-2. The application must be made within 30 days of the Board's resolution proposing removal; the special resolution must be passed within 60 days of receipt of Central Government approval. Before the resolution, the auditor must be given an opportunity to be heard. This three-step procedure (Board → Central Government → Special Resolution) is a deliberate barrier.
B. Resignation by Auditor — Section 140(2)
An auditor who resigns must, within 30 days, file Form ADT-3 with the Registrar (and with CAG in case of a government company) stating reasons for resignation. Failure to comply attracts a penalty of ₹50,000 or the auditor's remuneration, whichever is lower, plus continuing penalty under the 2020 amendment.
C. Removal by Tribunal — Section 140(5)
§ Section 140(5) — Tribunal-Ordered Removal Without prejudice to any other action under this Act or any other law, the Tribunal either suo motu or on an application made to it by the Central Government or by any person concerned, may, if it is satisfied that the auditor of a company has, whether directly or indirectly, acted in a fraudulent manner or abetted or colluded in any fraud by, or in relation to, the company or its directors or officers, by an order, direct the company to change its auditors. On such order, the auditor concerned shall not be eligible to be appointed as auditor of any company for a period of five years and shall be liable for action under Section 447. |
📖 Union of India v. Deloitte Haskins & Sells LLP, (2023) 8 SCC 56 The Supreme Court (Justices M.R. Shah and M.M. Sundresh) upheld the constitutional validity of Section 140(5). The Court held that the provision is a salutary one — designed to deal with auditors who collude in fraud — and the five-year debarment is proportionate and reasonable. The Court rejected the contention that the provision violated Article 14 or 19(1)(g). The judgment is the leading authority on auditor accountability under the 2013 Act. |
📖 S. Sukumar v. Institute of Chartered Accountants of India, (2018) 14 SCC 360 The Supreme Court directed structural reforms to ICAI's disciplinary mechanism and accelerated the operationalisation of the National Financial Reporting Authority (NFRA) under Section 132. The Court observed that self-regulation by the audit profession, in the wake of major audit failures, was inadequate; an independent regulator was constitutionally and policy-wise overdue. |
VIII. National Financial Reporting Authority — Section 132
Section 132, operationalised in October 2018, established NFRA — an independent regulator for the audit profession in India. Its jurisdiction extends to:
- Listed companies and certain large unlisted public companies (paid-up capital ≥ ₹500 crore, turnover ≥ ₹1,000 crore, or aggregate loans/borrowings/debentures ≥ ₹500 crore).
- Banking companies, insurance companies, electricity companies, and any company referred to it by the Central Government.
- All bodies corporate (Indian or foreign subsidiaries of these) above prescribed thresholds.
NFRA's powers are wide: investigation of professional misconduct (Section 132(4)), monetary penalties up to 5 times the audit fee for individuals and 10 times for firms, debarment for up to 10 years, and enforcement of accounting and auditing standards. NFRA's emergence has displaced ICAI's disciplinary jurisdiction over the audit of large entities — though ICAI retains jurisdiction over smaller companies and over CA practice generally.
IX. Audit Committee Linkage — Section 177
For listed and prescribed public companies, the Audit Committee — composed of directors with majority being independent — is the institutional interface with the auditor. The committee's mandate under Section 177(4) includes: (a) recommendation for appointment, remuneration, and terms of appointment of auditors; (b) review and monitor the auditor's independence and performance, and the effectiveness of audit process; (c) examination of the financial statement and the auditors' report thereon; (d) approval or any subsequent modification of transactions of the company with related parties; (e) scrutiny of inter-corporate loans and investments. The audit committee is the institutional check on management's financial reporting.
X. Civil and Criminal Liability of Auditors — Sections 147 and 245
§ Section 147(2) — Auditor's Liability for Loss If an auditor of a company contravenes any of the provisions of Section 139, Section 143, Section 144 or Section 145, the auditor shall be punishable with fine which shall not be less than ₹25,000 but which may extend to ₹5 lakh or four times the remuneration of the auditor, whichever is less. If the contravention is wilfully done with the intention to deceive, the auditor shall be punishable with imprisonment for a term up to 1 year and fine of ₹50,000 to ₹25 lakh or 8 times the auditor's remuneration, whichever is less. Where the auditor has been convicted, he shall (i) refund the remuneration; (ii) pay damages to the company, statutory bodies, or other persons for loss arising out of incorrect or misleading statements. |
Class Action under Section 245
Section 245 empowers shareholders or depositors to file a class action against the auditor (and others) for any improper or misleading statement of particulars made in the auditor's report or any fraudulent, unlawful, or wrongful act or conduct on his part. The auditor — and the audit firm — may be held liable. Where the audit firm is sued, partners knowingly or recklessly responsible are jointly and severally liable; passive partners enjoy limited protection.
XI. Common-Law Foundations — The Auditor's Duty of Care
📖 Re London and General Bank (No. 2), [1895] 2 Ch 673 Lindley LJ articulated the classical statement: 'An auditor is not bound to be a detective, or, as was said, to approach his work with suspicion or with a foregone conclusion that there is something wrong. He is a watchdog, not a bloodhound.' The auditor must exercise reasonable care and skill — he is not an insurer or guarantor of accuracy. |
📖 Kingston Cotton Mill Co. (No. 2), [1896] 2 Ch 279 Lopes LJ refined the duty: the auditor must use such reasonable care and skill as an ordinarily competent member of the profession would use. He is justified in relying on the representations of officials of the company unless circumstances exist which would arouse suspicion in the mind of a reasonably careful auditor. The case became the cornerstone English authority on the standard of care. |
📖 Caparo Industries Plc v. Dickman, [1990] 2 AC 605 (HL) The House of Lords held that an auditor's statutory duty of care is owed to the company and its shareholders as a body, not to individual investors who may rely on the audited accounts when making investment decisions. The decision restricted the scope of the auditor's tortious liability in negligence — though Indian law, through Section 245 and Section 147, has substantially restored expanded liability through statute. |
📖 Tri-Sure India Ltd. v. A.F. Ferguson & Co., (1987) 61 Comp Cas 548 (Bom) The Bombay High Court applied the Kingston Cotton Mill standard to Indian conditions, holding the auditor liable for negligence in failing to detect glaring discrepancies between the inventory records and the balance-sheet. The auditor's duty is not a guarantee of accuracy, but it is a duty of skill, care, and reasonable enquiry — and concentrated red flags must be investigated. |
📖 Institute of Chartered Accountants of India v. Price Waterhouse, (2007) Comp Cas — Satyam aftermath ICAI initiated and SFIO investigated PW partners associated with the Satyam audit. The case galvanised the Companies Act 2013 reforms — mandatory rotation, fraud reporting under Section 143(12), and the establishment of NFRA — which together transformed Indian auditing oversight. |
XII. Auditor's Independence — Section 144
§ Section 144 — Prohibited Services An auditor appointed under this Act shall provide to the company only such other services as are approved by the Board of Directors or the Audit Committee, but which shall not include any of the following: (a) accounting and book keeping; (b) internal audit; (c) design and implementation of any financial information system; (d) actuarial services; (e) investment advisory services; (f) investment banking services; (g) rendering of outsourced financial services; (h) management services; (i) any other prescribed services. |
Section 144 is the substantive guarantee of audit independence. Its rationale: an auditor who is also the bookkeeper, the system designer, or the management consultant cannot impartially audit his own work. The list mirrors Sarbanes-Oxley provisions in the United States and the EU's Audit Reform Directive.
XIII. Coaching Analogy — The Sentinel at the Gate
Imagine the company as a fortress. The directors are inside, building, trading, sometimes scheming. The shareholders are far away, holding only a parchment that says they own a share. Between them stands the auditor — the sentinel at the gate. His job is not to invade the fortress and arrest the wrongdoers; his job is to look at the paperwork the fortress sends out and tell the world whether it tells the truth. He is not a bloodhound (Lindley LJ); he is a watchdog. But the modern Companies Act has put a horn around his neck — Section 143(12) — which he must blow when he smells smoke. And if he is found in a corner with the wrongdoers, Section 140(5) and Section 147 will bring the law down on him personally. Section 144 is his uniform — he cannot moonlight as the gardener inside the fortress; he must stand only at the gate.
💡 Mnemonic for Auditor Provisions — '139-141-143-NFRA' 139 (Appointment + Rotation) · 141 (Eligibility) · 143 (Powers, Duties, Fraud Reporting) · 140 (Removal — Special Resolution + Central Government, OR Tribunal) · 144 (Prohibited Services) · 132 (NFRA) · 147 (Penalties). Recall: '141 lets you in, 139 keeps you ticking, 143 makes you talk, 140 throws you out, 132 watches you, 147 bills you.' |
🎯 EXAM POINTERS Section 139(1) — auditor appointed at first AGM for 5 years; ratification proviso omitted in 2017 amendment. Section 139(2) — rotation: individual 1 term of 5 years; firm 2 terms of 5 years; 5-year cooling-off; applies to listed + Rule 5 thresholds. Section 139(8) — casual vacancy filled by Board within 30 days; resignation vacancies need general meeting confirmation in 3 months. Section 141(3) — disqualifications: officer, employee, relative, ₹1 lakh+ indebtedness, conviction for fraud (10-year bar). Section 143(1) — right to access books and seek information; specific statutory enquiries. Section 143(12) — fraud reporting; ₹1 crore threshold for Central Government; Form ADT-4; Rule 13 mechanics. Section 140(1) — removal by special resolution + Central Government approval (Form ADT-2). Section 140(5) — Tribunal-ordered removal for fraud/collusion; 5-year debarment + Section 447. Union of India v. Deloitte (2023) — Section 140(5) constitutionally upheld. Section 132 / NFRA — independent regulator from Oct 2018; jurisdiction over listed and large companies; 10x audit-fee penalty. Section 144 — prohibited services list — bookkeeping, internal audit, IT design, actuarial, investment, management consultancy. Section 147 — civil and criminal liability; refund of remuneration; damages. Re London & General Bank (1895) — auditor is a watchdog, not a bloodhound. Kingston Cotton Mill (1896) — standard of reasonable care; reliance on management subject to suspicion-trigger. S. Sukumar v. ICAI (2018) — accelerated NFRA; structural reform of audit oversight. |