The Statutory Audit and the Auditor: Scope, Process and Opinion

A statutory audit is an independent examination of a company's financial statements, required by law, that ends in an opinion on whether those statements give a true and fair view. The auditor is appointed by the shareholders and reports to the shareholders, not to management. The people who prepare the accounts are not the people the auditor answers to, and that reporting line is the whole design.

Start in a lane rather than in a report. Four households pool money for a shared wedding shamiana, a caterer and a generator, and one of them, the one with the neatest handwriting, keeps the book. At the end everybody wants the book checked. Notice who they do not ask. The one person they do not ask is the bookkeeper, who has already given an answer. The four households agree together on somebody else, that person looks at the bills and the bank entries, and then reports back to all four rather than quietly to the bookkeeper. Every important feature of a statutory audit is already sitting in that lane.

The reader arrives holding the annual report and its parts, the statements themselves, and the idea that something can matter without being large. New here is the checking layer that sits on top of all of it: who does the checking, what they were asked to check, and what they were never asked to check. The half nobody was asked to check turns out to decide how the rest gets misread. The short block of careful language at the front of a report says one thing, and a reader usually assumes it says another.

Who is the Auditor, who appoints them, and to whom do they report?

The auditor is a qualified member of the accounting profession, licensed to practise, appointed by the shareholders at a general meetingThe formal meeting at which the shareholders of a company vote on the matters reserved to them, including the appointment of the person who will examine the accounts., holding office for a stated term, and required to be independent of the company being examined. Management prepares the financial statements. Management proposes a name and management pays the fee. But management does not make the appointment, and management is not who the finished report is addressed to.

The auditor is appointed by the shareholders and reports to the shareholders as a body, so a reader who pictures the auditor as working for management has misread the entire arrangement. The phrase as a body is doing real work in that sentence. The duty runs to the shareholders taken together, not to any single holder who happens to be reading, and not to a lender, a supplier or a job applicant who picks the report up afterwards. A lender, a supplier or a job applicant is allowed to read the report. None of them is who it was written for, and that distinction matters the moment somebody wants to lean on the report for something it was not addressed to.

Hold the uncomfortable part in view rather than skipping past it. The company pays the fee. The people whose work is being examined are in the room every day, and the person doing the examining is not. The tension is not a scandal and it is not hidden. Independence is the known structural weakness of the arrangement, and the appointment mechanism, the fixed term, the rotation requirements and the whole apparatus of safeguards exist precisely because of it. A structure that is honest about its own weak point and builds machinery around it is a stronger structure than one that pretends the weak point is not there.

What does a statutory audit actually cover?

A statutory auditStatutory simply means required by statute, that is, by law. The word says who demanded the examination, not how thorough it was. is not an open ended inspection of a business. An audit is an examination with a stated subject, and the subject is the financial statements. Three things sit inside that examination, and in India a fourth is bolted on beside it.

The first is whether the statements taken as a whole are free from material misstatementAn error or omission large enough, or of a kind important enough, that it could change what somebody reading the accounts decides to do., whether that misstatement would have come from fraud or from honest error. The second is whether the statements have been prepared in accordance with the reporting framework that applies to the company. The third is whether the accounting policies chosen are appropriate and have been applied the same way this year as last. The fourth, in India, is a separate opinion on internal financial controls with reference to the financial statements. The Companies Act requires that fourth opinion, and it sits alongside the main opinion rather than inside it.

The opinion covers the statements taken as a whole, tested to a threshold and on a sample, and not each figure in them one at a time. Almost every misreading that follows is a failure to hold on to that one sentence. A true and fair viewA view that is not misleading, taken across the accounts as a whole. It is a standard about the overall picture rather than a claim that every individual figure is exact. is a statement about the picture. A true and fair view is not a certificate attached to each line.

What does a statutory audit deliberately not cover?

The line between what an audit covers and what it does not is the most valuable distinction in the subject. Five things sit outside a statutory audit, and every one of them sits outside because the audit was never built to cover it. None is a place where the work fell short.

One. An audit is not a guarantee of accuracy. An audit offers reasonable assurance, not absolute assurance, and the two phrases are not interchangeable. Absolute assurance would mean examining everything, at a cost far beyond what the information could ever be worth to anybody reading it. Two. An audit does not test every transaction. The work is done on samples chosen against a threshold, and the engagement worked through below set that threshold at Rs 1,90,000. Three. An audit is not designed to detect all fraud. An audit is aimed at misstatement that matters, from any cause, and fraud built on collusion between people, or on management overriding its own controls, is constructed precisely so that the evidence left behind looks ordinary. Four. An audit says nothing about whether the business is well run, whether the strategy is sensible, or whether the year was a good one. Five. An audit does not value the company, and an opinion on a set of statements is not an opinion on what a share in them is worth.

Every one of those five is a designed limit written into what an audit was built to do, and not a shortcoming in how any particular audit was performed. A tape measure does not weigh anything. The tape measure is not defective. The trouble starts when somebody has been handed a tape measure and believes they have been handed a weighing scale. Somebody makes that mistake with an audit report somewhere in the world every working day.

The distance has a name. The expectation gapThe distance between what an audit is designed to do and what people who read its report assume it has done. It is a gap in understanding rather than a gap in the work. is the space between what an audit does and what its readers assume it does, and the expectation gap is the reason most readers go on to misuse everything else in this subject. Somebody who thinks the report certifies exactness will read a later correction as proof that the audit failed. Somebody who thinks the report screens for fraud will feel protected by something that never offered that protection. Somebody who thinks it comments on how well the business is run will read an entirely routine opinion as praise.

Now the other half. Leaving it out would be its own distortion. None of this means an audit is weak or that its output is worth little. Reasonable assurance, obtained by a licensed professional working to a published standard, under a legal duty to report to the shareholders, is a very great deal more than nothing. Reasonable assurance is the reason a bank will lend against accounts it did not prepare, and the reason a supplier will ship goods on credit to a company it has never visited. The correct reading of an audit is neither that it proves everything nor that it proves nothing, but that it establishes something specific, and knowing exactly what that something is puts a reader ahead of most people holding the same report.

How does the audit run through a year?

The report is short. The work behind it is not, and seeing the shape of that work is what stops a reader treating the report as a formality signed at the end of a lunch. Six stages run in order, and each one narrows the question the next one has to answer.

The work begins before the engagement is accepted at all, with independence checks: is there anything about this appointment that would compromise the person taking it. Then planning. Planning assesses where misstatement is most likely to arise and sets the materiality threshold that will govern everything afterwards. Then an understanding of how the records are produced, and testing of whether the controls around them actually work. Then substantive testingTesting the balances and transactions themselves against outside evidence, such as a supplier invoice, a bank confirmation or a physical count, rather than testing the system that produced them. of the balances and transactions themselves. Concluding then pulls together the going concernThe assumption that a business will carry on operating for the foreseeable future, which is what allows its assets to be carried at ordinary values rather than at what they would fetch in a hurried sale. assessment, the subsequent eventsThings that happen after the year end but before the report is signed, which may change what the accounts should say about the year just closed. that arose after the year end, and every uncorrected item gathered along the way. Only then, the report.

The report a reader sees runs to a sheet or two at the end of months of work, and its brevity is a format convention rather than a measure of how much was done. The brevity is worth holding on to in both directions. A short report does not mean a light audit, and it does not mean a heavy one. The length would be the same either way, so a reader cannot learn anything at all from how long a report is.

What is the audit ultimately for?

Most people say the audit is there to catch fraud, or to reassure. An audit may do either, and neither is the purpose. The lane makes the point again. When a buyer takes notebooks from a stall and hands over cash, nobody needs an audit. The buyer can see the goods, pays on the spot, and the transaction is finished before anybody walks away. Every part of that safety comes from being physically present.

Now take the presence away. A bank is asked to lend Rs 50,00,000 to a company nobody at the branch has visited. A paper supplier is asked for ninety days of credit by a buyer four states away. Somebody is offered a share in a business by a stranger. Not one of them can walk into the warehouse and count the notebooks, and not one of them will ever meet the person who wrote up the ledger. An audit exists so that people who did not prepare the accounts can act on them, and that is what makes credit and investment possible between strangers.

Everything else about the arrangement follows from that one purpose, and reads oddly without it. The reporting line runs to the shareholders because they are the strangers with the strongest claim. Independence is required because a check performed by the checked party carries no information. Materiality exists because the reliance needs to be affordable, and testing everything would price the assurance out of reach of exactly the ordinary businesses that need it most. Read the audit as public infrastructure for trust between people who will never meet, and every design choice inside it stops looking arbitrary.

Which Indian documents set out the appointment, the report and the controls opinion?

Independence, sampling and an opinion on a whole set of statements are ideas rather than local rules, so everything above holds wherever the company is registered. The named documents that carry the Indian requirements, and every period, limit and condition inside them, belong in one marked place.

What did the audit look like at Anjani Stationers' own scale?

Anjani Stationers Private Limited makes school notebooks and exercise books, sold Rs 2,70,00,000 in the year and carries Rs 1,80,00,000 of assets. Anjani Stationers is not listed and it is not large. Being a company is enough to require an audit, and the whole apparatus described above ran on this one at its own scale. Walk the six stages with the actual figures attached.

Planning set the threshold. Overall materiality was judged to be Rs 1,90,000, with performance materiality of Rs 1,42,500 used when choosing samples, and a trivial threshold of Rs 9,500 below which a misstatement found was not even accumulated onto the list. All three of those figures are this auditor's judgement on this one engagement, and not one of them is a rule, a benchmark, or a percentage that anybody else is required to use. A different auditor, on the same company, could reasonably have landed somewhere else.

Risk assessment then pointed at the places where the numbers rest on somebody's view rather than on a document. Three of them, and they are the same three that will keep reappearing whenever this company is examined. The charge of Rs 6,00,000 for debts that may not be collected took the provision to Rs 9,00,000, and Rs 3,77,000 of that charge is judgement rather than the ageing of the book at unchanged rates. The useful lives sitting behind Rs 12,00,000 of depreciation and amortisation. And the assessment that the Rs 2,40,000 claim from the Sunrise Public School group is not probable, the reason the claim is disclosed rather than recognised. On the consolidated statements a fourth joins them, the Rs 3,50,000 of goodwill arising on the holding in Chitra Binding Works, tested rather than written off over time.

Then the testing itself. The testing is where the year is actually spent. Receivables of Rs 95,00,000 before the provision were tested by writing to customers for confirmation and by working through the ageing of the book. Inventory of Rs 28,00,000 was tested by attending a count and by checking how it had been priced. The additions to property, plant and equipment of Rs 13,00,000, being Rs 12,00,000 of machinery and Rs 1,00,000 of software, were agreed back to supplier invoices. The Rs 8,00,000 charged by Chitra Binding Works during the year, of which Rs 1,50,000 was still unpaid at the year end, was tested as a related party balance because the holding makes it one.

Concluding pulled the ends together. The going concern basis was assessed. Events after the year end were considered up to the date the report was signed. And the Rs 21,20,000 of items disclosed but not recognised were checked to make sure the disclosure said what it should: the Rs 10,80,000 warehouse commitment, the Rs 8,00,000 guarantee over Chitra Binding Works' borrowing, and the Rs 2,40,000 disputed claim. The three add to Rs 21,20,000 exactly, and they sit in the notes rather than in the balance sheet because none of them met the test for recognition.

Now the part that decides whether any of this was worth reading. The opinion was unqualified, and an unqualified opinion is the ordinary outcome for an ordinary business rather than a distinction anybody earned. An unqualified opinion is what most audits of most companies produce, most years. Reading it as a compliment is the first mistake; reading its absence as a scandal is the second, and both come from the same misunderstanding of the word unqualified.

And the honest close. The audit tested samples against a Rs 1,90,000 threshold across a company with Rs 2,70,00,000 of revenue and Rs 1,80,00,000 of assets, formed a view on the statements taken as a whole, and said so in one short report. A reader who takes that report as a statement that every figure in Anjani Stationers' accounts is exact has read into it something it never claimed and was never built to claim. The report does establish something real, specific and useful. An audit is simply not what most people think it is.

The nine statements sort as follows. Three of the nine sit inside what an audit does: the opinion on whether the statements give a true and fair view, the check that the accounting policies are appropriate and consistently applied, and, in India, the separate report on internal financial controls. One sits in both circles: whether the company can be expected to keep trading. Going concern genuinely is assessed and reported on, but the assessment is about the basis on which the accounts were prepared rather than a promise about survival. The remaining five sit only in the assumption circle, and those five are the whole expectation gap: every transaction checked, every figure exact, all fraud found, the business judged to be well run, and the company valued.

What does a private company's audit share with a listed company's?

A common assumption is that a small unlisted company gets a lighter, less serious version of the exercise. It does not. A private company's audit is as statutory as a listed company's, and what differs is the additional reporting a listed company carries on top rather than anything inside the audit itself.

Everything so far applies to Anjani Stationers exactly as it applies to a company whose shares change hands every day. The appointment by the shareholders, the independence requirements, the materiality judgement, the sampling, the substantive testing, the going concern assessment, the opinion on a true and fair view and the separate report on internal financial controls are all present. Anjani Stationers does not carry the extra layer that comes with being listed. Key audit matters belong to the listed regime, so its audit report contains none. The company publishes no quarterly results, so there is no quarterly limited review. Reading the absence of those two as a lighter audit gets the causation backwards: they are absent because Anjani Stationers is unlisted, not because less work was done.

Who reads the audit report, and what do they do with it?

Three people open the same short report in the same month and take three different things from it, and the three readings together are the fastest way to see what that report is actually good for.

A lender reads the opinion to decide whether the statements are usable input, an analyst reads the scope and responsibilities paragraphs once so that every later report is read correctly, and Vaidehi Rao reads it to know which questions are coming. Take the lender first. The credit officer is not looking for a view on the business. The report does not carry one. The officer wants to know whether the accounts can be treated as a sound starting point for the bank's own work on cash, cover and repayment. An unqualified opinion says they can. An unqualified opinion does not say the loan is safe, and a credit officer who thinks it does has outsourced a decision that was never transferred.

The analyst's use is different and it is a one time investment. Read the scope paragraph and the responsibilities paragraphs properly, once, slowly, until the division is clear: management prepares and is responsible for the statements and for the controls behind them, the auditor examines and is responsible for the opinion. After that, every audit report the analyst ever opens is read for what it says rather than for what it is assumed to say. Twenty minutes of learning saves the same error repeating for a career.

And Vaidehi Rao, the finance controller, uses it in reverse. She already knows where the audit will concentrate. The three judgement areas are hers: the Rs 3,77,000 of judgement inside the provision charge, the useful lives behind Rs 12,00,000 of depreciation and amortisation, and the view that the Rs 2,40,000 claim is not probable. Writing down the basis for each of those three before anybody asks is what turns an audit from an interrogation into a conversation, and it is the most useful lesson in this guide for anybody who prepares accounts rather than reads them. None of that is about persuading anyone. The point is having the reasoning available in a form somebody outside the business can follow.

Anjani Stationers Private Limited, Chitra Binding Works, the Sunrise Public School group and Vaidehi Rao are invented.
Educational material. Not advice on any investment, tax, budget or market position.