Bank branch audit

A guide to the annual statutory branch audit of a scheduled commercial bank — IRAC classification, MOC mechanics, LFAR reporting, and the working papers Statutory Central Auditors expect.

1 · The bank audit context

India’s commercial banks close their books on 31 March. Statutory branch audits run April-May; the Statutory Central Auditor (SCA) consolidates branch findings and signs the bank-level audit report typically by mid-June. Branch auditors are appointed by the bank’s Audit Committee on the SCA’s recommendation, from RBI’s panel of empanelled CA firms.

For Public Sector Banks, the appointment process and panel are RBI-managed. Private banks follow a similar process driven directly by the bank’s audit committee. The empanelment route is the ICAI Multipurpose Empanelment Form (MEF).

2 · Scope of the branch audit

The branch auditor expresses an opinion on the branch’s financial statements / returns that get incorporated into the bank-level FS. The audit covers verification of assets, liabilities, P&L, IRAC classification, NPA provisioning, and operational compliance with RBI directions.

• Cash, RBI/SBI/other bank balances, NOSTRO reconciliations
• Investments held at branch level (where applicable)
• Advances — IRAC classification, provisioning, restructured-asset compliance, security verification
• Deposits — sample confirmation, TDS on interest, DEAF transfers
• Other assets (inter-office adjustments, suspense, stationery, suspense receivable)
• Other liabilities (bills payable, contingent liabilities, inter-office adjustments credit)
• Profit and loss — interest income / reversal logic, fee income, operating expenses
• Memorandum of Changes (MOC) — proposed reclassifications and provisions

3 · IRAC norms — the heart of bank audit

Income Recognition, Asset Classification and Provisioning (IRAC) is the auditor’s central focus. The norms classify advances into Standard / Sub-Standard / Doubtful (D1/D2/D3) / Loss based on overdue periods and asset characteristics. Income recognition stops at the moment an asset is classified NPA — accrued interest on NPA accounts must be reversed.

Provisioning minimums are prescribed and provide the floor:

4 · LFAR — Long Form Audit Report

In addition to the audit report, the branch auditor submits an LFAR — a questionnaire-style report covering matters the RBI prescribes. The format was revamped in 2020 (effective FY 2020-21).

Three parts:

• Part A — General: cash, balances with RBI/SBI/other banks, money at call, investments, advances (with detailed credit appraisal, documentation, IRAC classification questions), other assets, deposits, other liabilities, contingent liabilities, P&L
• Part B — Specialised Activities: foreign exchange (only for AD-category branches), treasury (only at treasury branches)
• Part C — Other Items: fraud detection and reporting (FMR-1 within 60 days for >₹1 cr), action taken on previous year’s LFAR, other material matters

5 · MOC — Memorandum of Changes

The MOC is the formal mechanism for branch auditors to flag changes to branch returns that should flow into the consolidated bank FS. Common MOC items: reclassification of advances (e.g. Standard to Sub-Standard), additional provisions, income reversals on NPAs identified late, balance-sheet reclassifications. The MOC is reviewed by the SCA and incorporated into the bank-level statements.

• Format: tabular, party-wise, with quantum + IRAC impact
• Documentation: each MOC line must be supported by underlying audit evidence
• Timing: typically submitted within 1-2 days of finalising the branch audit
• SCA review: the SCA may agree, modify or reject — auditor’s reasoning matters

6 · Common pitfalls — and NFRA observations

NFRA orders against bank branch auditors cluster around these themes:

• Acceptance of branch management’s IRAC classification without independent day-past-due test
• Inadequate testing of restructured-asset compliance with RBI Resolution Framework
• Failure to confirm bank balances with NOSTRO / other banks
• Provisions on security-backed advances computed without independent valuation of security
• Missing audit evidence on stock-and-book-debt statements used for drawing power
• Inadequate sample sizes for large-advance verification
• Frauds detected by branch but not reported under FMR-1 within 60 days

CORAA handles the audit. You handle the judgement.