ICFR Testing Working Paper — Sec 143(3)(i) Format

Q: Which companies need the 143(3)(i) ICFR opinion?

All companies by default — with the MCA exemption (notification of 13 June 2017) for private companies that are neither holding nor subsidiary of a public company, with turnover below ₹50 crore and aggregate borrowings from banks/FIs/body corporates below ₹25 crore at any time during the year. Record the applicability test in Part A; it is the first thing a reviewer checks.

Q: What is the difference between design and operating effectiveness?

Design asks whether the control, as conceived, would prevent or detect the misstatement if it operated as intended — tested by walkthrough. Operating effectiveness asks whether it actually operated consistently through the period — tested on samples across the year sized to the control’s frequency. A well-designed control that skipped three month-ends fails the second test, not the first.

Q: When does a control deficiency become a material weakness?

When there is a reasonable possibility that a material misstatement of the financial statements will not be prevented or detected on a timely basis — judged on likelihood and magnitude, considering compensating controls. A material weakness existing at the balance-sheet date forces a modified ICFR opinion under 143(3)(i), even where substantive work supports a clean opinion on the financial statements themselves.

The internal-financial-controls audit in one paper: applicability gate (₹50 Cr/₹25 Cr exemption), risk-control matrix with design vs operating effectiveness, ITGC battery incl. the edit-log link, and the deficiency ladder to the 143(3)(i) opinion — editable in Word.

Free · CORAA original — SA-aligned

Updated 18 Jul 2026

Opinion

Sec 143(3)(i) — adequacy + operating effectiveness

Exemption

Pvt cos < ₹50 Cr turnover & < ₹25 Cr borrowings

Core

RCM: risk → control → design → OE test

Ladder

Deficiency → significant → material weakness

Share this template

Your firm — letterhead

Appears at the top of the document as the audit firm letterhead.

Audit firm name

Audit firm address

Used as the letterhead block.

Engagement partner

ICAI membership no.

Firm registration no.(optional)

Engagement details

The client and period this document is for.

Entity under audit

Year ended

Live preview

6 required fields left to fill

ICFR Testing Working Paper — Sec 143(3)(i) Format

ICFR TESTING WORKING PAPER — SEC 143(3)(i)

Entity: {{client_name}} · Year ended: {{period_end}} · Prepared by: __________ · Reviewed by: __________

Purpose: document the audit of internal financial controls over financial reporting for the Sec 143(3)(i) opinion, per the ICAI Guidance Note on Audit of Internal Financial Controls over Financial Reporting. Applicability note: private companies with turnover below ₹50 crore and aggregate borrowings below ₹25 crore are exempt from the 143(3)(i) reporting (MCA notification of 13 June 2017) — record the applicability conclusion in Part A.

Part A — Scope and applicability

Particulars	Details
143(3)(i) applicable? (listed / turnover ≥ ₹50 Cr / borrowings ≥ ₹25 Cr)
Framework used by management (e.g. the Guidance Note’s internal control components)
Significant account balances and disclosures in scope
Significant processes mapped (e.g. revenue, purchases, payroll, inventory, treasury, financial close)
IT environment: applications, spreadsheets and reports relied on (ITGC scope)
Materiality for ICFR purposes

Part B — Risk-control matrix (one row per key control)

Process	What can go wrong (risk)	Assertion	Key control (incl. frequency & owner)	Design OK (Y/N)	Implemented (Y/N)	Operating-effectiveness test & sample	Result

Part C — IT general controls

ITGC area	Control tested	Result	WP ref
Access to programs and data (user provisioning, admin rights, password policy)
Program changes (change approval and testing)
Computer operations (backup, job monitoring, incident handling)
Audit trail / edit log enabled and preserved (feeds Rule 11(g))

Part D — Deficiency evaluation

Deficiency	Likelihood × magnitude assessment	Classification (Deficiency / Significant deficiency / Material weakness)	Compensating controls	Effect on 143(3)(i) opinion

A material weakness exists where there is a reasonable possibility that a material misstatement will not be prevented or detected on a timely basis — a material weakness at the year end requires a modified (adverse) ICFR opinion even if the financial-statement opinion is clean. Significant deficiencies are communicated per SA 265 (see the management letter template).

Part E — Conclusion

Conclusion on the adequacy and operating effectiveness of internal financial controls over financial reporting as at the balance-sheet date: ____________________________________________

Prepared by	Reviewed by	Engagement partner

Free · Email required once · Firm data stays in your browser

What’s inside

An excerpt from the template.

ICFR TESTING WORKING PAPER — SEC 143(3)(i)

Entity: ___ · Year ended: ___ · Prepared by: __________ · Reviewed by: __________

Part A — Scope and applicability

↑ Excerpt only — the full template is what you download as Word

About this template

What you’re downloading, and when to use it.

This template follows the format published by the Institute of Chartered Accountants of India (ICAI) in the AASB Audit Working Paper Templates (June 2023), the authoritative reference for Indian statutory-audit documentation. Fill in your firm’s letterhead and the engagement details on the form above, click Download Word file, and you’ll get a fully formatted .docx ready to use.

Everything is generated in your browser and on a stateless API endpoint — no account, no email gate, nothing stored. Edit freely in Word, Google Docs or Pages before sending to your client.

Common questions

FAQs.

Which companies need the 143(3)(i) ICFR opinion?

All companies by default — with the MCA exemption (notification of 13 June 2017) for private companies that are neither holding nor subsidiary of a public company, with turnover below ₹50 crore and aggregate borrowings from banks/FIs/body corporates below ₹25 crore at any time during the year. Record the applicability test in Part A; it is the first thing a reviewer checks.

What is the difference between design and operating effectiveness?

Design asks whether the control, as conceived, would prevent or detect the misstatement if it operated as intended — tested by walkthrough. Operating effectiveness asks whether it actually operated consistently through the period — tested on samples across the year sized to the control’s frequency. A well-designed control that skipped three month-ends fails the second test, not the first.

When does a control deficiency become a material weakness?

When there is a reasonable possibility that a material misstatement of the financial statements will not be prevented or detected on a timely basis — judged on likelihood and magnitude, considering compensating controls. A material weakness existing at the balance-sheet date forces a modified ICFR opinion under 143(3)(i), even where substantive work supports a clean opinion on the financial statements themselves.

Related templates

You might also need.

Management Letter Format — SA 265 Deficiency Communication

Free management letter format under SA 265 — significant vs other deficiencies, root cause and recommendation

Audit File Index — SA 230 Documentation Structure

Free SA 230 audit file index — A-to-J documentation structure with key papers per section, WP cross-references

Peer Review Readiness Checklist — ICAI Self-Assessment

Free ICAI peer review readiness checklist — SQC 1/SQM 1 firm controls, engagement-file discipline test across