Audit Process Steps: A Complete Guide for Beginners
Quick Answer
> One line summary: Understanding the audit process steps helps businesses prepare for a statutory audit under the Companies Act, 2013 and ICAI standards, ensuring compliance and reducing last-minute disruptions.
What are the main stages of the audit process?
The audit process typically follows four sequential stages: planning, execution, reporting, and follow-up. In the planning stage, the auditor understands your business, assesses risks, and designs an audit approach. During execution, the auditor tests your internal controls and examines financial transactions. The reporting stage involves drafting the audit report, and follow-up includes management responses to any findings.
Under the Companies Act, 2013, every company must have its financial statements audited by a qualified chartered accountant. The Institute of Chartered Accountants of India (ICAI) issues Standards on Auditing (SAs) that prescribe the procedures for each stage. For example, SA 300 deals with planning, SA 315 covers risk assessment, and SA 330 addresses audit procedures in response to assessed risks.
The process begins when the auditor receives the engagement letter, which formalises the terms. The auditor then gathers preliminary information about the entity, its industry, and regulatory environment. This initial understanding shapes the entire audit plan.
How does the auditor plan the audit?
The auditor starts by obtaining an understanding of your business, its internal controls, and the industry it operates in. This includes reviewing prior year audit files, discussing with management, and identifying areas with higher risk of material misstatement. Based on this, the auditor sets materiality levels and designs audit procedures.
Materiality is a key concept in audit planning. The auditor determines a threshold—typically a percentage of profit before tax or total revenue—above which misstatements are considered material. For Indian companies, ICAI's SA 320 provides guidance on materiality. The auditor also identifies related parties, significant transactions, and areas requiring special attention, such as revenue recognition or inventory valuation.
The planning stage also involves assembling the audit team. The engagement partner assigns staff with appropriate skills and experience. For a first-time audit, the auditor may need to perform additional procedures to verify opening balances. The audit plan is documented in an audit programme, which lists the specific steps to be performed.
What happens during the audit execution phase?
During execution, the auditor performs substantive procedures and tests of controls. Substantive procedures include verifying account balances, examining invoices, bank statements, and contracts, and recalculating depreciation or interest. Tests of controls evaluate whether your internal controls—such as segregation of duties or authorisation processes—are operating effectively.
The auditor gathers audit evidence through inspection, observation, inquiry, and confirmation. For example, the auditor may send bank confirmation letters directly to banks, physically verify inventory, or review minutes of board meetings. Under SA 500, audit evidence must be sufficient and appropriate. The auditor documents all findings in working papers.
If the auditor identifies misstatements, they are communicated to management for correction. Uncorrected misstatements are aggregated to assess whether they are material. The auditor also evaluates whether the financial statements comply with applicable accounting standards, such as Ind AS or AS, and the requirements of the Companies Act, 2013.
How is the audit report prepared and issued?
After completing the fieldwork, the auditor evaluates the evidence and forms an opinion. The audit report is issued in the format prescribed by SA 700. For Indian companies, the report includes an opinion on whether the financial statements give a true and fair view in conformity with accounting standards and the Companies Act, 2013.
The report contains several sections: the opinion paragraph, basis for opinion, key audit matters (for listed companies), management's responsibility, and auditor's responsibility. If the auditor finds material misstatements or scope limitations, the opinion may be qualified, adverse, or a disclaimer. A qualified opinion states that except for certain matters, the financial statements are fairly presented.
The auditor also issues a management letter highlighting internal control weaknesses and recommendations. For companies covered under the Companies Act, 2013, the auditor must report on internal financial controls under section 143(3)(i). The signed audit report is submitted to the company's board of directors and filed with the Registrar of Companies.
What follow-up actions are needed after the audit?
After the audit report is issued, management should address any findings or recommendations. The auditor may follow up on corrective actions in the next audit cycle. For companies, the audit committee (if applicable) reviews the audit findings and monitors implementation of recommendations.
The auditor also retains working papers for a prescribed period—typically seven years under ICAI guidelines. If the company is subject to tax audit under section 44AB of the Income Tax Act, the auditor must also file the tax audit report in Form 3CD with the Income Tax Department by the due date.
For listed companies, the audit report is discussed in the annual general meeting. Shareholders may ask questions about the audit findings. The company must also disclose any qualifications or emphasis of matter in its annual report.
What You Should Do Next
If you are preparing for an audit, gather your financial records, internal control documentation, and prior year reports. Discuss the audit timeline with your auditor and address any known issues early. For specific guidance on your company's audit requirements, consult a qualified chartered accountant.
This page provides preliminary information. It is not legal advice. For your matter, consult a qualified professional.