Difference between Statutory Audit and Secretarial Audit
Statutory audit: financial statements by CA under §139. Secretarial audit: legal compliance by PCS under §204. Different scope, statutes and signatories.
Prepare for compliance beyond the checklist. Section 204, Secretarial Standards, MR-3 reporting, audit planning, observations, compliance reporting, and governance reviews.
Statutory audit: financial statements by CA under §139. Secretarial audit: legal compliance by PCS under §204. Different scope, statutes and signatories.
Companies Act, SCRA, Depositories Act, FEMA (FDI/ODI/ECB), SEBI regulations, industry-specific laws and Secretarial Standards (SS-1, SS-2).
Every listed company + prescribed unlisted (paid-up ≥ ₹50 cr or turnover ≥ ₹250 cr or borrowings ≥ ₹100 cr) must annex a Secretarial Audit Report in Form MR-3 from a PCS to the Board's Report.
MR-3 covers period, applicable laws, audit observations, board composition, adequate systems and processes, and specific events affecting compliance.
Internal audit (§138) is operational; Secretarial audit is compliance. PCS may rely on internal-audit findings for systems but draws independent opinion.
MR-3 under §204 covers all laws; ASCR under LODR Reg. 24A covers only SEBI regulations. Different signatories, different filing channels.
Mandatory for unlisted public companies with paid-up capital ≥ ₹10 cr or turnover ≥ ₹50 cr. Issued in Form MGT-8 annexed to MGT-7.
Every listed company, every public company with paid-up capital ≥ ₹50 cr or turnover ≥ ₹250 cr, and every company having outstanding loans/borrowings ≥ ₹100 cr.
CSAS-1 (Auditing), CSAS-2 (Engagement), CSAS-3 (Audit Procedures), CSAS-4 (Audit Reporting). Effective from April 2020 for §204 audits.
Engagement letter → understanding of business → identification of applicable laws → risk-based sampling → audit evidence → drafting MR-3 → communication with management.
Listed entities must file Annual Secretarial Compliance Report (Reg 24A) signed by a PCS, alongside MR-3, within 60 days of year-end. Covers all SEBI regulations applicable.
If PCS suspects fraud, report to Audit Committee/Board if < ₹1 cr, and to Central Government via ADT-4 within 60 days if ≥ ₹1 cr.
Late filings, non-constitution of committees, delayed disclosures, RPT approval gaps, SS-1/SS-2 non-compliance, FEMA filing delays.