Full statutory chapter
Sections 139 to 148 - Bare Act and simple decode
The expandable text reproduces the consolidated statutory wording extracted from the official India Code Act. The decode beside it explains the operative control without replacing the law.
SECTION 139
Appointment of auditors
Purpose: Build the appointment, tenure, rotation and vacancy architecture.
Full consolidated Bare Act text
139. Appointment of auditors.
Clause-by-clause decode
- Every company appoints an auditor at the first AGM; the standard tenure runs to the conclusion of the sixth AGM.
- Written consent and an eligibility certificate are obtained before appointment; notice of appointment is filed with the Registrar within 15 days.
- Listed companies and prescribed classes follow mandatory rotation: individual - one 5-year term; firm - two consecutive 5-year terms; then a 5-year cooling-off.
- CAG appoints auditors of Government companies. First-auditor and casual-vacancy timelines differ for Government and other companies.
- Where an Audit Committee is required, its recommendation feeds every appointment and casual vacancy.
Finin2min decode: A five-year engagement letter is not the legal appointment by itself. The members appoint at the AGM, subject to eligibility, rotation and filings.
Practical example: A private company with paid-up share capital of Rs 60 crore is within the prescribed rotation class even if it is unlisted.
SECTION 140
Removal, resignation and special notice
Purpose: Control an auditor change without suppressing auditor rights or regulatory visibility.
Full consolidated Bare Act text
140. Removal, resignation of auditor and giving of special notice.
Clause-by-clause decode
- Early removal requires a special resolution and prior Central Government approval, after giving the auditor a hearing.
- A resigning auditor files the prescribed statement within 30 days with the company and Registrar; Government-company resignations also go to the CAG.
- Special notice is generally required to appoint another person instead of a retiring auditor or expressly not reappoint the retiring auditor, except at completion of a rotation tenure.
- The retiring auditor has representation and hearing rights, subject to Tribunal control against abuse.
- The Tribunal may direct a change where the auditor acted fraudulently, abetted or colluded in fraud; a final order triggers five-year ineligibility and section 447 exposure.
Finin2min decode: Management cannot “accept” an auditor resignation informally and wait until the next AGM. The statement and vacancy process start immediately.
Practical example: An auditor resigning on 10 July should file ADT-3 by 9 August, with reasons and relevant facts, rather than a vague one-line explanation.
SECTION 141
Eligibility, qualifications and disqualifications
Purpose: Protect competence and independence before and throughout the engagement.
Full consolidated Bare Act text
141. Eligibility, qualifications and disqualifications of auditors.
Clause-by-clause decode
- Only a chartered accountant, or a qualifying firm/LLP with the required majority of partners practising in India, is eligible. Only CA partners may act and sign.
- Disqualifications cover employment and officer relationships, financial interests, indebtedness/guarantees beyond prescribed limits, prohibited business relationships, close KMP relationships, excessive audit ceiling, recent fraud conviction and section 144 services.
- The statutory ceiling is 20 company audits per person/partner, subject to prescribed exclusions when the ceiling is counted.
- Eligibility is continuous: a later disqualification automatically vacates office and creates a casual vacancy.
Finin2min decode: Independence is a live control, not a certificate collected once a year. Partner, relative, network and group-company relationships require continuous monitoring.
Practical example: If the engagement partner becomes indebted to the holding company beyond the prescribed limit during the year, the firm must assess immediate disqualification and vacancy consequences.
SECTION 142
Remuneration of auditors
Purpose: Separate shareholder-approved audit remuneration from other services.
Full consolidated Bare Act text
142. Remuneration of auditors.
Clause-by-clause decode
- The general meeting fixes audit remuneration or determines the manner of fixing it.
- The Board may fix the remuneration of the first auditor appointed by it.
- Audit remuneration includes expenses and facilities connected with audit, but excludes separate remuneration for other services.
Finin2min decode: Do not bundle statutory-audit fees, tax fees, systems work and reimbursements into one opaque approval.
Practical example: The AGM may authorise the Board to determine the statutory-audit fee within a disclosed framework, while separately approving permitted non-audit services.
SECTION 143
Powers, duties and auditing standards
Purpose: Convert unrestricted evidence access into a defensible opinion and statutory reporting package.
Full consolidated Bare Act text
143. Powers and duties of auditors and auditing standards.
Clause-by-clause decode
- The auditor has access at all times to books and vouchers and may demand information and explanations. Holding-company access extends to subsidiary and associate records relevant to consolidation.
- The member report addresses true and fair view and the matters in section 143(3), the Rules and CARO where applicable. Qualifications and negative answers require reasons.
- Government-company audits include CAG directions, supplementary audit/comment and possible test audit. Branch audits feed the principal auditor.
- Auditors comply with Standards on Auditing. Until standards are notified by Government, ICAI standards are deemed standards under section 143(10).
- Fraud reporting uses a prescribed threshold and route. Good-faith reporting is protected; the framework also extends to cost auditors and practising company secretaries for their statutory engagements.
Finin2min decode: The audit opinion is only one layer. Section 143, Rule 11, CARO, IFC reporting, branch reporting and fraud reporting can each create separate conclusions and timelines.
Practical example: An unmodified opinion does not cure omission of a required CARO clause or an unsupported Rule 11(g) audit-trail conclusion.
SECTION 144
Auditor not to render certain services
Purpose: Prevent self-review and management-participation threats across the network.
Full consolidated Bare Act text
144. Auditor not to render certain services.
Clause-by-clause decode
- Prohibited services include accounting/bookkeeping, internal audit, financial-information-system design/implementation, actuarial, investment advisory, investment banking, outsourced financial services and management services.
- The prohibition applies to services rendered directly or indirectly to the company, its holding company or subsidiary.
- “Indirectly” captures relatives, connected persons, partners, parent/subsidiary/associate entities, significant influence/control and shared names, trade marks or brands.
- Other services may be provided only when permitted and approved by the Board or Audit Committee, as applicable.
Finin2min decode: Changing the invoice entity does not remove the prohibition. Substance, network, brand and influence are tested.
Practical example: The statutory auditor’s overseas network firm designing the parent’s ERP financial controls can create a section 144 problem even where the Indian audit firm does not invoice the client.
SECTION 145
Signature and reading of adverse matters
Purpose: Make the signer and adverse matters visible to members.
Full consolidated Bare Act text
145. Auditor to sign audit reports, etc.
Clause-by-clause decode
- The authorised auditor/CA partner signs the audit report and statutory certificates.
- Qualifications, observations or comments on financial transactions or matters adversely affecting company functioning are read at the general meeting and remain open to member inspection.
Finin2min decode: Signing is not an administrative rubber stamp; it attaches professional and statutory responsibility.
Practical example: The engagement partner should confirm that the final signed PDF, XBRL-linked attachments and printed annual report contain the identical opinion and annexures.
SECTION 146
Auditor attendance at general meetings
Purpose: Give the auditor notice, presence and a right to be heard on audit business.
Full consolidated Bare Act text
146. Auditors to attend general meeting.
Clause-by-clause decode
- All general-meeting notices and communications are forwarded to the auditor.
- Unless exempted, the auditor attends personally or through an authorised representative who is qualified to be an auditor.
- The auditor has a right to be heard on business concerning the auditor.
Finin2min decode: Attendance is a governance right and duty; it is not limited to meetings where accounts are adopted.
Practical example: Where members question a qualification, management should not answer for the auditor or restrict the auditor’s explanation.
SECTION 147
Punishment for contravention
Purpose: Allocate company, officer, auditor, firm and partner consequences.
Full consolidated Bare Act text
147. Punishment for contravention.
Clause-by-clause decode
- Company/officer defaults under sections 139-146 attract the prescribed statutory fines.
- Auditor contravention of sections 139, 143, 144 or 145 attracts a fine linked to statutory limits and remuneration.
- Knowing or wilful deception can trigger imprisonment, a higher fine, refund of remuneration and damages.
- For firm audits, civil and criminal liability is allocated to the firm and concerned partners under the statutory framework; the proviso limits non-fine criminal liability to concerned partners.
Finin2min decode: Professional-discipline, NFRA, SEBI, tax, fraud and civil actions may run alongside section 147.
Practical example: A prohibited service can create more than a fee issue: independence, audit validity, disciplinary and section 147 consequences must all be assessed.
SECTION 148
Cost records and cost audit
Purpose: Add product/service cost traceability and independent cost assurance for prescribed sectors.
Full consolidated Bare Act text
148. Central Government to specify audit of items of cost in respect of certain companies.
Clause-by-clause decode
- The Central Government may prescribe classes that must maintain material, labour and other cost particulars.
- Cost audit applies to prescribed classes crossing the sector and turnover thresholds under the Cost Records and Audit Rules.
- The Board appoints a cost accountant; members determine/ratify remuneration in the prescribed manner. The statutory financial auditor cannot be the cost auditor.
- Cost audit is additional to statutory audit. The company must assist, the cost auditor reports to the Board, and the company files the report with explanations within the prescribed timeline.
Finin2min decode: Cost records applicability and cost audit applicability are separate tests. Maintaining CRA-1 records does not automatically mean CRA-3 audit applies, and vice versa cannot occur without Rule 3 coverage.
Practical example: A non-regulated manufacturer with Rs 120 crore total turnover and Rs 40 crore turnover from a covered product generally crosses both cost-audit tests, subject to product classification and exemptions.
Companies (Audit and Auditors) Rules
Current rule-by-rule working register
The Rules operationalise appointment, rotation, disqualification, reporting, fraud and cost-auditor remuneration. Amendment history through the identified 2021 audit-rule amendments has been considered; current portal instructions should be checked on filing date.
Rule 1
Short title and commencement
The Companies (Audit and Auditors) Rules, 2014 form the procedural framework for sections 139-148.
Control: Use the consolidated Rules and amendment trail, not the original 2014 PDF alone.
Rule 2
Definitions
Act, Annexure, fees, forms, Regional Director and section references take their statutory meanings.
Control: Definitions in the Act and Definition Details Rules continue to apply.
Rule 3
Selection and appointment
The Audit Committee, where required, evaluates qualifications, experience and pending professional proceedings and recommends the auditor; the Board and members complete the appointment path.
Control: Document independence, industry competence, team capacity, network conflicts and the reason for any Board disagreement with the committee.
Rule 4
Conditions and ADT-1
The proposed auditor certifies eligibility, term compliance, audit-ceiling compliance and absence of disqualification. The company files the appointment notice in ADT-1 within 15 days of the meeting.
Control: A portal acknowledgement does not cure an ineligible appointment.
Rule 5
Classes subject to rotation
Rotation applies to listed companies, unlisted public companies with paid-up share capital at least Rs 10 crore, private companies with paid-up share capital at least Rs 50 crore, and companies below those capital thresholds having public borrowings from financial institutions/banks or public deposits at least Rs 50 crore. OPCs and small companies are excluded.
Control: Test status and thresholds for the relevant appointment date; “public borrowings” is not the same as every inter-company payable.
Rule 6
Manner of rotation
Incoming firms are screened for common partners and same-network/common-brand connections; the cooling-off and partner-movement rules prevent cosmetic rotation.
Control: Maintain a network map, partner-history declaration and predecessor communication before accepting.
Rule 7
Removal before expiry
The company applies in ADT-2 to the Central Government within 30 days of the Board resolution and, after approval, holds the general meeting within 60 days.
Control: Do not pass the special resolution first and seek approval later.
Rule 8
Resignation
The auditor files ADT-3 within 30 days, setting out reasons and relevant facts.
Control: Reasons should be specific enough for members and regulators to understand unresolved reporting, access or fee issues.
Rule 9
Firm/partner liability overlay
The Rules historically identify the concerned partner for non-fine criminal liability; read this with the current section 147(5) proviso.
Control: Engagement quality controls must identify who performed, reviewed and approved critical judgements.
Rule 10
Financial and relationship disqualifications
Relative security interest is permitted only up to the prescribed face-value limit of Rs 1 lakh, with a 60-day corrective window for acquisition; indebtedness above Rs 5 lakh and guarantee/security above Rs 1 lakh disqualify. Ordinary-course arm’s-length customer transactions and permitted professional services are carved out from “business relationship”.
Control: Screen the entire group perimeter and all partners/relatives covered by section 141.
Audit ceiling
Twenty-company ceiling
The 20-company ceiling is applied per person/partner, with prescribed exclusions including OPCs, dormant companies, small companies and private companies having paid-up share capital below Rs 100 crore when the ceiling is counted.
Control: An audit firm must map each signing partner’s portfolio before accepting or reallocating an engagement.
Rule 11
Other matters in the audit report
Report on litigation impact, foreseeable losses on long-term contracts including derivatives, IEPF delays, fund-routing/ultimate-beneficiary representations and audit procedures, section 123 dividend compliance, and accounting-software audit trail.
Control: Rule 11(g) requires evidence that the feature existed, operated throughout the year, was not tampered with and was preserved; it is not satisfied by a software vendor certificate alone.
Rule 12
Branch audit
The branch auditor performs duties for the branch and sends the report to the company auditor; the principal auditor deals with it under the Act and Standards on Auditing.
Control: Group/branch instructions, materiality, component risk and documentation must be aligned.
Rule 13
Fraud reporting
Fraud involving or expected to involve at least Rs 1 crore follows the Central Government route in ADT-4 after the prescribed Board/Audit Committee communication process. Lesser fraud is reported to the Audit Committee/Board and disclosed in the Board’s Report in prescribed detail.
Control: The threshold determines the route, not whether the matter is “fraud”; preserve the two-day, 45-day and 15-day clocks.
Rule 14
Cost-auditor remuneration
The Board appoints and fixes the cost-auditor remuneration subject to member ratification in the prescribed manner.
Control: Cost-auditor independence and section 148 restrictions remain separate from fee approval.
Companies (Auditor's Report) Order, 2020
Applicability and all 21 reporting areas
Generally exempt: banking companies, insurance companies, section 8 companies, OPCs, small companies, and a qualifying private company that is not a holding/subsidiary of a public company and satisfies all prescribed capital/reserves, borrowing and revenue limits. Confirm the Order and current status for the reporting year.
| Clause | Audit area |
|---|
| i | PPE, right-of-use assets, intangibles, title deeds, revaluation and benami proceedings |
| ii | Inventory verification and working-capital statements filed with banks/financial institutions |
| iii | Investments, guarantees, security and loans/advances in the nature of loans |
| iv | Compliance with sections 185 and 186 |
| v | Deposits and amounts deemed deposits |
| vi | Cost records under section 148(1) |
| vii | Undisputed and disputed statutory dues |
| viii | Unrecorded income surrendered/disclosed in tax assessments |
| ix | Borrowing defaults, wilful defaulter status, end use, short-term funds used long-term, group funding and pledge-based borrowings |
| x | IPO/FPO/debt use and private placement/preferential allotment |
| xi | Fraud, section 143(12) filings and whistle-blower complaints |
| xii | Nidhi-company compliance |
| xiii | Related-party compliance and disclosure |
| xiv | Internal-audit system and consideration of internal-audit reports |
| xv | Non-cash transactions with directors/connected persons |
| xvi | RBI Act registration, NBFC/HFC business and Core Investment Company matters |
| xvii | Cash losses |
| xviii | Resignation of statutory auditors and consideration of outgoing auditor issues |
| xix | Capability of meeting liabilities due within one year - no guarantee of future viability |
| xx | CSR transfers for non-ongoing and ongoing projects |
| xxi | Qualifications/adverse remarks in component CARO reports considered in consolidated reporting |
Clause (xix) is not a viability guarantee: the auditor evaluates evidence available up to the report date on whether material uncertainty exists regarding liabilities due within one year. The Order itself cautions that this is not an assurance of future viability.
Fraud, audit trail and internal controls
Three separate but connected conclusions
Fraud risk under SAs
Design procedures for material misstatement due to fraud; maintain scepticism and communicate.
Section 143(12)
Use the prescribed legal reporting route based on the amount involved/expected.
CARO clause (xi)
Report fraud noticed/reported, ADT-4 filing and whistle-blower complaints.
Rule 13 timeline - Rs 1 crore or more
Day 0-2: report the matter to the Board/Audit Committee, seeking reply/observations.
Up to 45 days: wait for reply/observations.
Next 15 days: forward report, reply and comments to Central Government in ADT-4; if no reply, forward with a note.
Audit-trail conclusion
- Identify every accounting application and relevant database/interface.
- Test whether edit log can be disabled by ordinary or privileged users.
- Cover masters, journals, interfaces, migrations and direct database changes.
- Test operation throughout the year, not only at year-end.
- Evaluate tampering indicators and statutory preservation.
Common failure: reporting “the software has an audit trail feature” without evidence that it operated throughout the year and was not tampered with. A feature, an active configuration and preserved logs are three different assertions.
IFC reporting boundary
The section 143(3)(i) report is on internal financial controls with reference to financial statements. Certain OPC/small/private-company exemptions apply under the relevant notification, but management still needs controls sufficient to prepare reliable accounts, and the auditor still assesses controls when designing the financial-statement audit.
Exam and professional application
Sixteen case studies with answers
1. Rotation: private company crosses capital threshold
Facts: A private company has paid-up share capital of Rs 52 crore and no public borrowings. It proposes to reappoint the same individual auditor for a second five-year term.
Answer: Rule 5 brings the company within rotation. An individual cannot exceed one five-year term. The company must select an eligible successor and screen common-partner/network restrictions.
2. Borrowing-based rotation
Facts: An unlisted public company has paid-up capital of Rs 6 crore but bank borrowings of Rs 54 crore.
Answer: The prescribed borrowing threshold can trigger rotation despite capital below Rs 10 crore. Use the legally relevant public-borrowing measure and appointment-date facts.
3. Common-brand successor
Facts: Firm A completes ten years. Firm B has different partners but uses the same network brand.
Answer: Rule 6 anti-circumvention controls can make Firm B ineligible. “No common partner” alone is insufficient.
4. Relative receives bonus shares
Facts: A partner’s relative held shares of face value Rs 95,000; a bonus issue increases face value above Rs 1 lakh.
Answer: Apply Rule 10 and the 60-day corrective window. Document discovery, disposal and independence safeguards; do not wait until year-end confirmation.
5. Partner loan from group company
Facts: The signing partner has a Rs 6 lakh employee-style loan from the audit client’s holding company.
Answer: The indebtedness threshold is tested across the statutory group perimeter. This creates disqualification unless the facts fall outside the rule.
6. ERP implementation by network firm
Facts: The overseas network designs and implements the subsidiary’s financial reporting system while the Indian firm audits the parent.
Answer: Section 144’s direct/indirect and group perimeter may prohibit the service and create section 141 disqualification. Approval cannot legalise a prohibited service.
7. Resignation over restricted access
Facts: The auditor resigns after management repeatedly denies access to overseas subsidiary records.
Answer: File ADT-3 within 30 days with meaningful reasons and relevant facts. Assess reporting, fraud, professional communication and successor-auditor implications.
8. Fraud expected at Rs 1.20 crore
Facts: Evidence indicates employee/vendor collusion expected to involve Rs 1.20 crore.
Answer: Use the Rule 13 Central Government route: communicate to Board/Audit Committee within the prescribed two-day period, manage the 45-day reply window and file ADT-4 within the prescribed 15-day step.
9. Fraud of Rs 40 lakh
Facts: A payroll fraud of Rs 40 lakh is identified.
Answer: It remains fraud, but the lesser-amount route applies: report to Audit Committee/Board and ensure prescribed Board’s Report disclosure. Other legal reporting may still apply.
10. Audit trail disabled during migration
Facts: Audit trail worked for nine months but was disabled for a three-month ERP migration.
Answer: Rule 11(g) requires operation throughout the year for all relevant transactions. The auditor needs a fact-specific modified/qualified reporting conclusion; post-year-end activation does not cure the period.
11. CARO private-company exemption
Facts: A standalone private company has paid-up capital plus reserves of Rs 80 lakh, peak bank borrowing Rs 90 lakh and revenue Rs 11 crore.
Answer: It fails the CARO private-company exemption because the revenue condition is not met. All conditions are cumulative.
12. IFC reporting exemption
Facts: A private company has turnover Rs 42 crore and aggregate bank/FI/company borrowings below Rs 25 crore throughout the year.
Answer: Test the applicable private-company exemption notification and group/status conditions. Financial-statement audit controls still matter even where the separate section 143(3)(i) opinion is exempt.
13. Foreign branch auditor
Facts: An Indian company’s Dubai branch is audited by a locally qualified accountant.
Answer: Permitted subject to local law and section 143(8). The principal auditor issues instructions, evaluates competence/independence, receives the branch report and deals with it under the SAs.
14. Cost audit - non-regulated product
Facts: Total turnover is Rs 125 crore; covered-product turnover is Rs 34 crore.
Answer: Cost records may apply at Rs 35 crore overall, but non-regulated cost audit generally needs Rs 35 crore product turnover as well as Rs 100 crore overall. On these numbers, the product threshold is not met.
15. Government-company first auditor
Facts: A Government company is incorporated and CAG does not appoint within 60 days.
Answer: The Board has the next 30 days; if it also fails, members have the following 60 days at an EGM. Do not apply the ordinary 30/90-day first-auditor route.
16. Twenty-audit ceiling
Facts: A partner signs 18 ordinary public/private company audits plus several OPC, dormant and qualifying small/private-company audits.
Answer: Apply prescribed exclusions carefully and count per partner, not merely per firm. Keep a contemporaneous ceiling certificate before acceptance and signature.
Frequently asked questions
Ten rapid answers
Is annual ratification of auditor appointment still required?
No. The annual-ratification proviso in section 139(1) was omitted. Eligibility and continuing independence still require annual/event-driven review.
Does every private company rotate auditors?
No. Rotation applies to prescribed classes. Paid-up capital and public-borrowing/public-deposit thresholds must be tested; OPCs and small companies are excluded from Rule 5.
Can the Board remove an auditor?
Not by itself. Early removal requires prior Central Government approval and a special resolution, with a hearing for the auditor.
Can a statutory auditor also perform internal audit?
No. Internal audit is expressly prohibited under section 144, including indirect/network routes within the statutory perimeter.
Does a Rs 20 lakh fraud escape reporting?
No. It follows the lower-value Rule 13 route rather than ADT-4 to the Central Government, and Board’s Report disclosure is prescribed.
Does CARO apply to consolidated financial statements?
CARO primarily reports on company financial statements, but clause (xxi) requires the holding-company auditor to report qualifications/adverse remarks in CARO reports of included components.
Is an unmodified audit opinion enough to say the company is compliant?
No. Audit is reasonable assurance on financial statements plus specified statutory reporting; it is not a blanket legal-compliance certificate.
Can management restrict access to subsidiary records?
For consolidation, the holding-company auditor has statutory access to relevant subsidiary and associate records. Restrictions require escalation and reporting assessment.
Is cost audit the same as internal or statutory audit?
No. It is a separate section 148 engagement by a cost accountant for prescribed sectors and thresholds, additional to section 143 audit.
Are March 2026 amendment proposals already applicable?
No. The Corporate Laws (Amendment) Bill, 2026 is presented separately as a proposal. Apply only enacted, commenced provisions and current Rules.
