Non-Audit Services to Audit Clients: law, practical example, evidence, risk and Finin2min action workflow.
Prohibited services and management responsibility must be screened entity by entity.
Companies Act and ethical code
Read with the current rules, notifications, circulars, portal instructions and binding judgments applicable to the event date.
Fix person, entity, role, activity, period, location, threshold and regulator.
Separate statute, delegated law, regulator guidance, contract and internal policy.
Reconcile documents, systems, filings, accounts and approvals.
Run a service-permissibility check.
An auditor offers internal control design.
Finin2min decision rule: reperform the analysis when a material fact, date, role or legal instrument changes.
Calling it advisory may not change prohibited substance.
Common additional failures are stale law, incomplete authority, inconsistent records, undocumented judgment and missing cross-law analysis.
| Stage | Control | Output |
|---|---|---|
| Facts | Freeze parties, dates, amounts and documents | Fact sheet |
| Law | Open current primary sources | Legal map |
| Evidence | Resolve inconsistencies | Evidence index |
| Decision | Approve, remediate, disclose or escalate | Signed note |
Prohibited services and management responsibility must be screened entity by entity.
Companies Act and ethical code
acceptance and independence file; engagement letter; evidence and review trail; public communication approvals.
Run a service-permissibility check.
ICAI
Reviewed 4 July 2026
ICSI
Reviewed 4 July 2026
Source review: 4 July 2026. Verify later amendments and case status before professional reliance.