A bank branch statutory audit is the audit of one branch's books by a statutory branch auditor. The result feeds the statutory central auditor's audit of the whole bank. The branch auditor also completes the Long Form Audit Report (LFAR), a questionnaire set by the Reserve Bank of India. It differs from a company audit in who appoints the auditor, how the work is split, and how much the RBI's directions shape what you test and report.
Last reviewed: 17 October 2026. Facts checked. We opened the ICAI page announcing the revised 2009 edition of the Guidance Note on Audit of Banks. The 2025 edition PDF we tried to open was a scanned file that returned no readable text, so we could not read it. Our other points come from search-result summaries of RBI disclosures, bank policy documents and practitioner decks, which we did not open. We state no numbers for branch coverage, branches per auditor or rotation periods, because they change and we could not verify the current figures. Rely on the current RBI circulars and the latest ICAI Guidance Note.
The structure: central and branch
A bank has a head office and many branches. Statutory audit is split:
- The statutory central auditor audits the bank as a whole and signs the main report.
- Statutory branch auditors audit selected branches and report on them. The central auditor uses that work.
This differs from a company audit, where one auditor or firm usually covers all units, apart from any separate branch auditors.
Who appoints whom
From the RBI disclosures and policy documents we saw summarised:
- For public sector banks, RBI is the approving authority for appointing statutory central and branch auditors.
- Banks select branch auditors themselves, within RBI's framework, and firms are validated by RBI before appointment.
- There are limits on how many branches a branch auditor can be allotted, and rotation rules after a period of continuous branch audit.
- Branch selection is meant to cover a representative mix, and the bank decides business coverage within the RBI's directions. A recent policy document we saw summarised says banks have discretion on coverage from FY 2023-24.
Check the latest RBI circular for exact limits, coverage and rotation before you apply.
What a branch audit involves
The ICAI guidance note, in its 2009 edition, was organised into five parts: knowledge of the banking industry, risk assessment and internal control, financial statement items, the LFAR, and special aspects. That order is a useful map of the work.
- Understand the branch. Its business, products, local conditions and internal control environment.
- Assess risk. Where errors are likely, such as advances, income recognition, cash handling and reconciliations.
- Test the financial statement items. Advances, deposits, cash, balances with other banks, investments held, interest and other income and expense.
- Review loan accounts. Sanction, documentation, security, monitoring and classification, as the bank's records and the RBI's directions require.
- Check reconciliations and inter-branch balances.
- Complete the LFAR.
- Report to the bank and, where required, to the central auditor.
Our guide to bank audits for CA firms gives the wider view.
The LFAR
The Long Form Audit Report is a detailed questionnaire prescribed by RBI. One practitioner deck we saw summarised says the branch version is in question-and-answer format, while the head office version is narrative, with annexures needed for branches with large or irregular advance accounts. ICAI also publishes a technical guide on the LFAR formats. The LFAR is a separate report from the audit report on financial statements. Treat it as a second deliverable with its own checks and a deadline.
How it differs from a company audit
| Point | Bank branch audit | Company audit |
|---|---|---|
| Appointment | Through RBI-approved process for public sector banks, within the bank's selection | By members at the general meeting |
| Unit audited | A branch, as part of a bank | The whole entity |
| Who signs the main report | The central auditor, on the bank's statements | The statutory auditor |
| Extra report | LFAR prescribed by RBI | CARO and other statutory reports for companies |
| Main regulator input | RBI directions and circulars | Companies Act, rules and SEBI where listed |
| Risk focus | Advances, income recognition, classification | Depends on the business |
| Time pressure | Tight, because branch reports feed the central audit | Varies |
| Reference guide | ICAI Guidance Note on Audit of Banks, updated annually (2025 edition seen in search results) | General Standards on Auditing |
Checklist for a branch audit
Use this as a start, and add the items in the current guidance note and RBI circulars. A bank branch statutory audit checklist is available for the working papers.
- Appointment letter, allocation and scope confirmed.
- Engagement terms, deadlines and reporting format agreed with the bank.
- Current RBI circulars and the bank's closing instructions collected.
- Branch profile and risk assessment done.
- Advances sample selected, with a basis you can defend.
- Deposits, cash and reconciliations tested.
- Income recognition and classification of accounts reviewed.
- Inter-branch and other reconciliations checked.
- LFAR questions answered with evidence.
- Management letter points drafted. See the management letter template.
- Report issued and delivered before the bank's cut-off.
Where branch audit and concurrent audit differ
A concurrent audit is a continuing check during the year. A statutory branch audit is a year-end audit with a statutory report. The two serve different purposes. For more, see what concurrent audit means. The RBI disclosures we saw say that, for branches covered by concurrent audit but not branch audit, the concurrent auditors' LFARs and certifications go to the bank's Managing Director and CEO. Verify this against the circular.
Practical tips
- Collect circulars early. RBI directions change. Keep a dated list.
- Plan sample sizes. Do not wait for the last week to pick advances.
- Leave time for review. The central auditor needs your report on time.
- Keep working papers tidy. See what to keep under SA 230.
- Plan the workload. PDF statements and manual records slow everything down. Our post on bank audits at scale without an ERP looks at that.
- Use the audit time estimator to size the hours.
Frequently Asked Questions
What is a statutory branch auditor?
An auditor appointed to audit a bank branch. The work feeds the statutory central auditor's audit of the bank.
What is the LFAR?
The Long Form Audit Report, a detailed questionnaire prescribed by the RBI. It is separate from the audit report on the financial statements.
Who appoints branch auditors in public sector banks?
From the RBI disclosures we saw summarised, banks select them within RBI's framework, and RBI validates the firms before appointment. Check the latest circular.
How is a bank audit different from a company audit?
The split between central and branch auditors, the RBI's role, the LFAR and the focus on advances and income recognition set it apart. A company audit is under the Companies Act and the general standards.
Which guide should a branch auditor read?
The ICAI Guidance Note on Audit of Banks, in its latest edition, with the technical guide on LFAR formats and current RBI circulars.
Related Articles
Statutory facts on this page are checked against their sources, and the page says where it relied on secondary reporting. How we verify · Report an error