Audit Procedures explained: this guide covers what it means, who it applies to, the step-by-step process, documents required, fees, due dates and penalties in India — so you can stay compliant with confidence and avoid costly mistakes.
The tax auditor applies generally accepted audit procedures to give two different opinions: that the financial statements are true and fair, and that the Form 3CD particulars are true and correct. SA 530, SA 230, SA 315 and SA 580 supply the method.
From the ICAI Guidance Note on Tax Audit (Revised 2026), the concluding edition under the Income-tax Act, 1961. The Standards on Auditing continue unchanged for the audit under section 63 of the Income-tax Act, 2025; only the report changes to Form No. 26 under rule 47 of the Income-tax Rules, 2026.
Two opinions, two standards of assurance
| Subject | Opinion |
|---|---|
| The balance sheet | Whether it gives a true and fair view of the state of affairs of the assessee |
| The profit and loss account / income and expenditure account | Whether it gives a true and fair view of the profit or loss, or surplus or deficit, for income tax purposes |
| The statement of particulars in Form 3CD, annexed to Form 3CA or 3CB | Whether the particulars are true and correct |
The financial statements attract a true and fair opinion, which admits materiality and judgement. The Form 3CD particulars attract true and correct — a factual assertion about each reported figure. The audit procedures on a clause-by-clause basis therefore have to be more specific than a financial statement audit alone would require, which is why clause-level working papers exist separately from the financial statement file.
The audit procedures themselves
Paragraph 13.1: in giving the report, the tax auditor will have to use his professional skill and expertise and apply such audit tests and procedures as the circumstances of the case may require, considering the contents of the audit report. The auditor conducts the tax audit by applying the generally accepted auditing procedures applicable to any other audit — so the audit procedures are the ordinary ones, applied to an extraordinary reporting standard.
- SA 530, Audit Sampling — the auditor should use professional judgment to apply audit sampling, depending on the nature and volume of transactions, the materiality involved and the internal control procedures followed by the assessee.
- The auditor should also refer to the other Standards on Auditing issued by ICAI as may be relevant, and to the Guidance Note on Audit Reports and Certificates for Special Purposes.
- If the statutory auditor is also appointed to do the tax audit, it is advisable to carry out both audits concurrently.
Access to records — SA 210 and SA 315
Paragraph 13.2 starts from section 143 of the Companies Act, 2013, which gives auditors powers to call for books, information, documents and explanations and to access all books and records. For the tax audit the route is SA 210: the auditor must establish whether the pre-conditions for an audit are present before accepting or continuing. Under paragraph 6(b)(iii) of SA 210 the auditor obtains management's agreement that it acknowledges its responsibility to provide:
- access to all information of which management is aware that is relevant to the preparation of the financial statements — records, documentation and other matters;
- additional information the auditor may request for the purpose of the audit; and
- unrestricted access to persons within the entity from whom the auditor determines it necessary to obtain audit evidence.
If the assessee then refuses
The Guidance Note notes that, since the assessee appoints the tax auditor, it is in the assessee's own interest to furnish everything. But if, after agreeing the terms, the assessee refuses to produce a particular record or to give specific information or explanation relating to a section 44AB reporting requirement, the tax auditor should see the impact:
- from the perspective of "management integrity";
- against the overall assessment of risk of misstatements under SA 315, Identifying and Assessing the Risks of Material Misstatement Through Understanding the Entity and Its Environment; and
- consequently on his opinion, for reporting in clause (3) of Form No. 3CA or clause (5) of Form No. 3CB.
Working papers — the five required notes
Paragraph 13.3: the report under section 44AB is to assist the income-tax department to assess the correct income of the assessee. The auditor should keep necessary working papers about the evidence relied upon, including notes on:
| Working paper content | |
|---|---|
| (a) | The work done while conducting the audit, and by whom |
| (b) | The explanations and information given during the course of the audit, and by whom |
| (c) | The decisions taken on the various points |
| (d) | The judicial pronouncements relied upon while making the audit report |
| (e) | Certificates issued by the assessee and management letters |
Paragraph 13.4 adds SA 230, Audit Documentation: the tax auditor should prepare documentation providing a sufficient and appropriate record of the basis for the auditor's report and evidence that the audit was planned and performed in accordance with the SAs and applicable legal and regulatory requirements. Suggested Working Papers are at Appendix IXC.
Written representations — SA 580
Paragraph 13.5 identifies where the books simply cannot answer the question. Form 3CD requires reporting on items for which full information may not be available in the books of account, including:
- payments to persons covered under section 40A(2)(b);
- ICDS adjustments;
- the percentage of work in progress;
- good, doubtful or bad debts; and
- MSME enterprises appearing as creditors.
These require inputs from management. The tax auditor may raise issues for the views of those charged with governance, and should consider SA 580, Written Representations, obtaining representations in appropriate circumstances and at appropriate times — before commencement of the audit or after conclusion of the audit process. A draft Sample Management Representation Letter is at Appendix IXA, with Compiled Management Representation Letters at Appendix IXB.
Where a statutory audit already exists
Paragraph 13.6: if the accounts have been audited under any other law by the statutory auditors, it is not necessary for the tax auditor to conduct the audit again in the matter of expressing a true and fair view. But section 44AB does require certification of the particulars in the prescribed form, on which the tax auditor expresses his opinion as to whether they are true and correct. Where the opinion on the accounts has already been expressed, it is not necessary to repeat the entire exercise; the tax auditor annexes a copy of the audited accounts.
Worked example
A manufacturing company's tax audit is planned as follows:
- Statutory audit already completed by the same firm — the true and fair work is not repeated; the audited accounts are annexed and the report is in Form 3CA.
- Clause-level audit procedures are designed for true and correct assertions, with SA 530 sampling sized by transaction volume and control quality. The financial statement audit procedures are not simply re-used.
- Management is asked, in writing, for the section 40A(2)(b) related-party list, the MSME creditor list and the ICDS working; none of these is derivable from the ledgers.
- Management declines to produce a specific consultancy agreement. The auditor evaluates management integrity, re-assesses risk under SA 315, and reports the limitation in Para 3 of Form 3CA.
- An SA 580 representation letter based on Appendix IXA is obtained at conclusion.
- Working papers record the work and the person who did it, the explanations and their source, the decisions, the case law relied on and the certificates obtained.
Audit checklist
- Design clause-level audit procedures for the true and correct assertion, separate from the financial statement work.
- Record the audit procedures actually performed against each clause, not merely the conclusion reached.
- Size samples under SA 530 by nature and volume of transactions, materiality and internal controls.
- Obtain the SA 210 pre-condition acknowledgements on access to information and to people.
- On any refusal, assess management integrity and re-run the SA 315 risk assessment.
- Report limitations in Para 3 of Form 3CA or Para 5 of Form 3CB.
- Maintain the five categories of working paper notes, and comply with SA 230.
- Obtain an SA 580 representation for section 40A(2)(b), ICDS, WIP, debt classification and MSME creditors.
- Where a statutory audit exists, annex the audited accounts rather than repeating the opinion work.
Common mistakes
- Applying financial statement materiality to a "true and correct" particular.
- Treating a refusal to produce records as a scoping matter rather than a management integrity and SA 315 risk matter.
- Omitting "by whom" from the working paper record of work done and explanations received.
- Taking the MSME and section 40A(2)(b) lists from the ledger without a written representation.
- Repeating the true and fair audit where a statutory audit report already exists.
