Strengthening Auditing Standards: Insights From NFRA Orders And Their Implications For Auditors

Recently, the Institute of Chartered Accountants of India (ICAI) published a comprehensive compilation of orders and reports from the National Financial Reporting Authority (NFRA), offering a deeper understanding of the expectations set for auditing firms and auditors. As a regulatory body established under the Companies Act, 2013, NFRA plays a crucial role in monitoring and enforcing compliance with auditing and accounting standards, as well as overseeing the quality of services provided by the audit profession to ensure reliability in financial reporting.

A quick analysis of NFRA's orders concerning 13 major companies, including CMI Limited, Coffee Day Global Limited, Dewan Housing Finance Limited, Infrastructure Leasing &Financial Services Limited(ILFS), SRS Limited and Reliance Capital Limited, reveals that approximately 30% of non-compliances relate to two key standards: SA 220 - Quality Control for an Audit of Financial Statements and SA 230 - Audit Documentation.

Key Areas of Non-Compliance Identified

1. SA 220: Quality Control for an Audit of Financial Statements: SA 220 outlines the auditor's objectives in conducting an independent audit and explains the requisite quality control measures, including the appointment of an Engagement Quality Control Reviewer (EQCR). NFRA's orders for companies such as SRS Limited, ILFS, and CMI Limited indicate that compliance with EQCR requirements was inadequate. Despite the mandate to document EQCR discussions with the engagement partner and audit team, many companies failed to adhere to this, undermining the audit's quality control process.
2. SA 230: Audit Documentation: The orders also highlighted significant deficiencies in audit documentation. In several companies, including Dewan Housing Finance Limited and Jaiprakash Associates Limited, auditors failed to provide sufficient evidence of audit procedures performed. Key documents such as audit plans, materiality assessments, fraud risk evaluations, and EQCR discussions were either incomplete or missing, resulting in a lack of clarity and inadequate recording of critical audit decisions.
3. SA 200 Overall Objectives of the Independent Auditor & Conduct of Audit in accordance with standard on Auditing: Around 8% of non-compliances pertained to SA 200, which defines the overall objectives of the auditor. Issues such as failure to comply with ethical requirements, lack of independence of the engagement partner, and insufficient review of revenue recognition policies led to material misstatements in the financial statements. In some cases, auditors failed to identify manipulations in sales and purchase figures due to weak scrutiny of accounting policies.
4. SA 240: The Auditor's Responsibilities Relating to Fraud in an Audit of Financial Statements: NFRA's reports also flagged serious lapses in compliance with SA 240, which addresses the auditor's responsibilities relating to fraud. Auditors in several cases overlooked crucial indicators of fraud, such as round-tripping of loans and unusual transactions. The failure to properly evaluate fraud risk in revenue recognition and to challenge management assertions contributed to significant financial misstatements.
5. SA 315 Identifying and Assessing the Risks of Material Misstatement Through Understanding the Entity and its environment: Auditors are required to thoroughly understand the entity and its environment to assess risks of material misstatements. However, the NFRA orders pointed out gaps in this process, especially regarding management override of controls and inadequate verification of fundamental assertions like revenue completeness and accuracy. Weaknesses in internal controls, particularly over advances and related party transactions, were also frequently noted.
6. SA 260: Communication with Those Charged with Governance (TCWG): A recurring theme across several audit files was the failure of engagement partners to maintain effective communication with TCWG. This omission hindered the governing body's ability to oversee audit findings, including significant issues such as the valuation of investments and compliance with regulatory requirements.
7. SA 320: Materiality in Planning and Performing an Audit: The assessment of materiality, a cornerstone of effective audit planning, was found to be insufficient in companies like CMI Limited and SRS Limited. Auditors did not adequately document how materiality was determined, further compromising the audit's effectiveness.
8. SA 550: Related Parties: In cases involving related party transactions, auditors failed to provide evidence that such transactions were conducted at arm's length. This lack of documentation, coupled with insufficient testing of arm's length pricing, led to non-compliance with SA 550, posing significant risks to the accuracy of financial statements.
9. SA 570: Going Concern: Several companies, including CMI Limited and SRS Limited, exhibited signs that should have prompted an evaluation of their going concern assumption. Yet, auditors did not obtain adequate evidence regarding management's assessment, resulting in non-compliance with SA 570. This failure to critically assess the company's future viability potentially misled stakeholders about the financial health of these entities.

Conclusion

The NFRA's findings serve as a wake-up call for auditing firms and professionals to rigorously adhere to established standards and improve audit quality. The common thread across these non-compliances is the lack of thorough documentation, insufficient risk assessment, and poor communication with those charged with governance. Moving forward, it is crucial that auditors strengthen their processes, uphold ethical standards, and enhance their vigilance in identifying fraud and ensuring the completeness and accuracy of financial reporting. By addressing these gaps, the audit profession can restore trust in the financial reporting system and better safeguard stakeholder interests and to uphold standard of the profession.