{"id":22205,"date":"2023-04-21T16:53:25","date_gmt":"2023-04-21T11:23:25","guid":{"rendered":"https:\/\/gstguntur.com\/?p=22205"},"modified":"2023-04-21T16:54:04","modified_gmt":"2023-04-21T11:24:04","slug":"audits-in-banks-cs-professional-study-material","status":"publish","type":"post","link":"https:\/\/gstguntur.com\/audits-in-banks-cs-professional-study-material\/","title":{"rendered":"Audits in Banks &#8211; CS Professional Study Material"},"content":{"rendered":"<p>Chapter 21 Audits in Banks &#8211; <a href=\"https:\/\/gstguntur.com\/cs-professional-banking-law-and-practice-study-material\/\">CS Professional Banking Law and Practice Notes<\/a>\u00a0is designed strictly as per the latest syllabus and exam pattern.<\/p>\n<h2>Audits in Banks &#8211; CS Professional Banking Law and Practice Study Material<\/h2>\n<p>Question 1.<br \/>\nWrite short note on long form audit report.<br \/>\nAnswer:<br \/>\nLong Form Audit report (IFAR):<br \/>\nBesides the normal audit report as-per the statutory requirements, auditors are also required to furnish Long Form Audit Report. The matters which the banks require their auditors to deal with in the LFAR have been specified by Reserve Bank of India. The format of LFAR is in a questionnaire form.<\/p>\n<p>The LFAR is not a substitute for Statutory Audit Report. Nor is it deemed to be a part of Statutory Audit Report. The Statutory Audit Report is a self contained document and the auditor should not make any cross reference to the observation in the LFAR.<\/p>\n<p>In case of any matter of emphasis, the auditor should mention the same in the report clearly.<\/p>\n<p>LFAR is an elaborate reporting on the operations and controls in the branch which is based on the audit observations made by the auditor during the course of the audit. The whole bank LFAR is drafted by the Central Statutory Auditors based on the LFAR received from the Branch Auditors.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/gstguntur.com\/wp-content\/uploads\/2021\/10\/GST-Guntur.png\" alt=\"Audits in Banks - CS Professional Study Material\" width=\"123\" height=\"13\" \/><\/p>\n<p>Question 2.<br \/>\nWrite short note on Internal Audit.<br \/>\nAnswer:<br \/>\nInternal Audit:<\/p>\n<ul>\n<li>Bridges the gap between management and the board.<\/li>\n<li>Assesses the ethical climate and the effectiveness and efficiency of operations.<\/li>\n<li>Serves as an organization\u2019s safety net for compliance with rules, regulations and overall best business practices.<\/li>\n<li>Is a cornerstone of strong governance.<\/li>\n<li>Gives an assurance that:\n<ul>\n<li>Internal controls are sufficient to mitigate risks.<\/li>\n<li>Governance processes are adequate.<\/li>\n<li>Organizations goals and objectives are met.<\/li>\n<\/ul>\n<\/li>\n<li>While external audit confirms the validity of the financial position expressed by an organisation, investigation may be supported by internal audit function.<\/li>\n<li>Internal audit confirms the effectiveness of business process controls in reducing financial risk.<\/li>\n<li>Assures compliance with the law.<\/li>\n<li>Indicates areas where business processes may be improved upon.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/gstguntur.com\/wp-content\/uploads\/2021\/10\/GST-Guntur.png\" alt=\"Audits in Banks - CS Professional Study Material\" width=\"123\" height=\"13\" \/><\/p>\n<p>Question 3.<br \/>\nDistinguish between Forensic Audit and Revenue Audit.<br \/>\nAnswer:<br \/>\nForensic Audit: The forensic audit is normally performed by a forensic accountant who has the skill in both accounting and investigation. Forensic Accounting is the type of engagement that undertaking the Financial Investigation in response to a particular subject matter, where the findings of the investigation normally are used as evidence in court.<\/p>\n<p>The investigation is covering numbers of areas include fraud, crime, insurance claims as well as a dispute among shareholders. A forensic audit is also needed to have a proper plan, procedure, and report like other audit engagement.<\/p>\n<p>Revenue Audit: Revenue audit is usually conducted at large and medium-sized branches and is aimed at identifying cases of leakage of revenue due to wrong computation of interest, non-application of interest on time, application of incorrect rates of interest\/exchange\/commission, non-application of penal interest, non-recovery or short recovery of service charges on guarantees and letters of credit, etc. This type of audit is also known as \u2018income and expenditure audit\u2019 or \u2018income leakage audit\u2019.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/gstguntur.com\/wp-content\/uploads\/2021\/10\/GST-Guntur.png\" alt=\"Audits in Banks - CS Professional Study Material\" width=\"123\" height=\"13\" \/><\/p>\n<p>Question 4.<br \/>\nDescribe the Principles of Internal Audit.<br \/>\nAnswer:<br \/>\nPrinciples of Internal Audit:<br \/>\nBasic Principles of Internal Audit as enumerated by Institute of Chartered Accountants of India (ICAI) are given below:<br \/>\n(i) independence- The independence of the internal audit function as a whole, and the Internal Auditor within the organisation, plays a large part in establishing the independence of the Internal Auditor.<\/p>\n<p>(ii) integrity and Objectivity-The Internal Auditorshall be honest, truthful and be a person of high integrity. He shall operate in a highly professional manner and seen to be fair in all his dealings. He shall avoid all conflicts of interest and not seek to derive any undue personal benefit or advantage from his position.<\/p>\n<p>(iii) Due Professional care- The Internal Auditor shall exercise due professional care and diligence while carrying out the internal audit. \u201cDue professional care\u201d signifies that the Internal Auditor exercises reasonable care in carrying out the work to ensure the achievement of planned objectives.<\/p>\n<p>(iv) Confidentiality- Internal Auditor shall at all times, maintain utmost confidentiality of all information acquired during the course of the audit work. He shall not disclose any such information to a party outside the internal audit function and any disclosure shall be on a \u201cneed to know basis\u201d.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/gstguntur.com\/wp-content\/uploads\/2021\/10\/GST-Guntur.png\" alt=\"Audits in Banks - CS Professional Study Material\" width=\"123\" height=\"13\" \/><\/p>\n<p>(v) Skills and competence- Internal Auditor shall have sound knowledge, strong interpersonal skills, practical experience and professional expertise in certain areas and other competence required to conduct a quality audit. He shall undertake only those assignments for which he has the requisite competence.<\/p>\n<p>(vi) System and Process Focus &#8211; An Internal Auditor shall adopt a system and process focused methodology in conducting audit procedures.<\/p>\n<p>(vii) Participation in Decision Making- In conducting internal audit assignments, the Internal Auditor shall avoid passing any judgement or render an opinion on past management decisions. As part of his advisory role, the Internal Auditor shall avoid participation in operational decision making which may be subject of a subsequent audit.<\/p>\n<p>(viii) Sensitive to Multiple Stakeholder interests- The Internal Auditor shall evaluate the implications of his observations and recommendations on multiple stakeholders, especially where diverse interests may be conflicting in nature. In such situations, the Internal Auditor shall remain objective and present a balanced view.<\/p>\n<p>(ix) Quality and continuous improvement- The quality of the internal audit work shall be paramount for the Internal Auditor since the credibility of the audit reports depends on the reliability of reported findings.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/gstguntur.com\/wp-content\/uploads\/2021\/10\/GST-Guntur.png\" alt=\"Audits in Banks - CS Professional Study Material\" width=\"123\" height=\"13\" \/><\/p>\n<p>Question 5.<br \/>\nWhat do you mean by risk based Internal Audit? Discuss the scope of Risk Based Internal Audit (RBIA).<br \/>\nAnswer:<br \/>\nRisk Based Internal Audit (RBIA)<br \/>\nRBIA is not about auditing risks but about auditing the management of risk. Its focus is on the processes applied by the management team. The primary focus of risk-based internal audit is to provide reasonable assurance to the Board and top management about the adequacy and effectiveness of the risk management and control framework in the banks\u2019 operations.<\/p>\n<p>Scope of RBIA<br \/>\nThe precise scope of risk-based internal audit must be determined by each bank for low, medium, high, very high and extremely high risk areas. However, at the minimum, it must review\/report on:-<\/p>\n<ul>\n<li>process by which risks are identified and managed in various areas;<\/li>\n<li>the control environment in various areas;<\/li>\n<li>gaps, if any, in control mechanism which might lead to frauds, identification of fraud prone areas;<\/li>\n<li>data integrity, reliability and integrity of MIS;<\/li>\n<li>internal, regulatory and statutory compliance;<\/li>\n<li>budgetary control and performance reviews;<\/li>\n<li>transaction testing\/verification of assets to the extent considered necessary<\/li>\n<li>monitoring compliance with the risk-based internal audit report<\/li>\n<li>variation, if any, in the assessment of risks under the audit plan vis-a-vis the risk-based internal audit.<\/li>\n<li>a review of the systems in place for ensuring compliance with money laundering controls;<\/li>\n<li>identifying potential inherent business risks and control risks, if any;<\/li>\n<li>suggesting various corrective measures and,<\/li>\n<li>undertaking follow up reviews to monitor the action taken thereon<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/gstguntur.com\/wp-content\/uploads\/2021\/10\/GST-Guntur.png\" alt=\"Audits in Banks - CS Professional Study Material\" width=\"123\" height=\"13\" \/><\/p>\n<p>Question 6.<br \/>\nWrite an explanatory note on information systems audit approaches.<br \/>\nAnswer:<br \/>\nInformation Systems Audit Approaches:<br \/>\nThere are three approaches for conducting Information Systems Audit viz. auditing around the computer, auditing through the computer and auditing with the computer.<br \/>\n(i) Auditing around the computer: Under this approach, the emphasis is on checking the correctness of the output data\/documents with reference to the input of a process without going into the details of the processing involved. This approach is preferred, where auditors themselves do not have the desired level of technical skills to adopt the other approaches.<\/p>\n<p>(ii) Auditing through the computer: Auditing through the computer requires fair knowledge of the operating system, hardware being used and certain technical expertise in systems development. Under this approach, the computer programs and the data constitute the target of IS audit.<\/p>\n<p>(iii) Auditing with the computer: Under this approach, the computer system and its programs are used as tools in the audit process. The objective is to perform substantive tests using the computers and its programs. The data from the auditee\u2019s computer system are retrieved to an independent environment.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/gstguntur.com\/wp-content\/uploads\/2021\/10\/GST-Guntur.png\" alt=\"Audits in Banks - CS Professional Study Material\" width=\"123\" height=\"13\" \/><\/p>\n<p>Computer-Assisted Audit Tools and Techniques (CAATTs): CAATTS are efficient and effective ways to audit system-generated files, records and documents and to evaluate internal controls of an accounting system in many Information Systems. Banks should adopt a proper mix of manual techniques and CAATs for conducting IS Audit.<\/p>\n<p>(a) Test Data Method &#8211; This method is used to establish application integrity by processing specially prepared sets of input data. The results of each test are compared with the pre-determined expected results.<\/p>\n<p>(b) Base Case System Evaluation &#8211; Under this method, a base test set of transactions is prepared along with the expected results. This set of transactions is comprehensive and all possible transaction types are included.<\/p>\n<p>(c) Tracing &#8211; Under this method, the test data does a virtual walk through the application logic. The application under review must undergo a special compilation to activate a trace option.<\/p>\n<p>(d) Integrated Test Facility &#8211; This is an automated test technique, where the audit module is designed in the application program itself to be run in the normal course of operations by the application program with a specific choice of test data.<\/p>\n<p>(e) Parallel Simulation &#8211; This requires the auditor to write a program that simulates the key features and processes of the application. The program is run on the pre-processed actual transactional data and the results obtained are compared with the actual results obtained.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/gstguntur.com\/wp-content\/uploads\/2021\/10\/GST-Guntur.png\" alt=\"Audits in Banks - CS Professional Study Material\" width=\"123\" height=\"13\" \/><\/p>\n<p>Question 7.<br \/>\nWhat do you mean by Credit Audit? Explain on the objectives of credit audit.<br \/>\nAnswer:<br \/>\nCredit Audit:<br \/>\nCredit Risk is defined as \u201cthe possibility of losses associated with diminution in the credit quality of borrowers or counter-parties. In a bank\u2019s portfolio, losses stem from outright default due to inability or unwillingness of a customer or counterparty to meet commitments in relation to lending, trading, settlement and other financial transactions.<\/p>\n<p>Credit Audit examines compliance with extant sanction and post-sanction processes\/ procedures laid down by the bank from time to time. Credit Audit is an integral part of risk based internal audit system, aimed at identification of credit risk and may also suggest the remedial measures for controlling the credit risk underlying the loan &amp; investment portfolios of high value.<\/p>\n<p>Objectives of credit Audit:<\/p>\n<ul>\n<li>To review sanction process and compliance status of large value loans vis-a-vis Bank\u2019s loan policies, procedures and laid down credit processes.<\/li>\n<li>To bring about improvement in the quality of Bank\u2019s credit portfolio.<\/li>\n<li>To make an independent review of Credit Risk Assessment<\/li>\n<li>To suggest\/recommend corrective actions to improve credit quality, credit administration and credit skills of the staff.<\/li>\n<li>Pick-up early warning signals and suggest remedial measures.<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/gstguntur.com\/wp-content\/uploads\/2021\/10\/GST-Guntur.png\" alt=\"Audits in Banks - CS Professional Study Material\" width=\"123\" height=\"13\" \/><\/p>\n<p>Identification of signs of stress and initiation of adequate steps is crucial to ensure the quality of the credit portfolio and therefore needs careful examination during the audit. CAAs identified as Medium and High Risk are reviewed at shorter intervals at the discretion of Internal audit department of bank.<\/p>\n<p>Scores\/ risk ratings are awarded under credit risk &amp; control risk areas separately at CAA level as High \/ Medium \/ Low \/ Very Low Risk. Final rating of CAA is arrived at based on the RBI\u2019s Risk Matrix, considering inherent business risk and control risk as under:<\/p>\n<ol>\n<li>Extremely High Risk<\/li>\n<li>Very High Risk<\/li>\n<li>High Risk<\/li>\n<li>Medium Risk<\/li>\n<li>Low risk.<\/li>\n<\/ol>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/gstguntur.com\/wp-content\/uploads\/2021\/10\/GST-Guntur.png\" alt=\"Audits in Banks - CS Professional Study Material\" width=\"123\" height=\"13\" \/><\/p>\n<p>Question 8.<br \/>\nWhat is Concurrent Audit? Describe the Scope of Concurrent Audit.<br \/>\nAnswer:<br \/>\nConcurrent audit<br \/>\nConcurrent audit aims at shortening the interval between a transaction and its independent examination. It is, therefore, integral to the establishment of sound internal accounting functions and effective controls and is regarded as part of a bank\u2019s early warning system to ensure timely detection of serious errors and irregularities, which also helps in averting fraudulent transactions and preventive vigilance in banks.<\/p>\n<p>It is a continuous audit, which goes on all the year around, usually conducted by external auditors (Chartered Accountants) on monthly basis.<\/p>\n<p>Scope of concurrent audit<br \/>\nConcurrent audit is an examination which is contemporaneous with the occurrence of transactions or is carried out as near thereto as possible. It attempts to shorten the interval between a transaction and its examination by an independent person.<\/p>\n<p>There is an emphasis in favour of substantive checking in key areas rather than test checking. This audit is essentially a management process integral to the establishment of sound internal accounting functions and effective controls and setting the tone for a vigilant internal audit to preclude the incidence of serious errors and fraudulent manipulations.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/gstguntur.com\/wp-content\/uploads\/2021\/10\/GST-Guntur.png\" alt=\"Audits in Banks - CS Professional Study Material\" width=\"123\" height=\"13\" \/><\/p>\n<p>A concurrent auditor may not sit in judgement of the decisions taken by a branch manager or an authorised official. This is beyond the scope of concurrent audit. However, the audit will necessarily have to see whether the transactions or decisions are within the policy parameters laid down by the Head Office, they do not violate the instructions or policy prescriptions of the RBI, and that they are within the delegated authority.<\/p>\n<p>Minimum areas of coverage under concurrent Audit:<\/p>\n<ol>\n<li>Cash transactions including physical verification of cash, etc.<\/li>\n<li>Loans &amp; Advances including physical verification of securities, delegation of Powers for sanction, Security Charge Creation, end use verification of funds, monitoring of accounts with excess drawings, monitoring of projects, etc.<\/li>\n<li>Adherence to KYC \/ AML guidelines including monitoring of transactions in accounts, compliance with Foreign Account Tax Compliance Act (FATCA) and Common Reporting Standards (CRS), monitoring of transactions in new accounts\/staff accounts, reporting of CTR\/STR, etc.<\/li>\n<li>Remittances\/ Bills for Collection including SWIFT transactions, monitoring of overdue statements (bills purchased \/ discounted \/ negotiated, etc.).<\/li>\n<li>House Keeping including reconciliation of accounts, monitoring of General Ledger\/Subsidiary General Ledger\/Parking Accounts, opening of internal accounts, etc.<\/li>\n<li>Treasury operations.<\/li>\n<li>Non fund based business.<\/li>\n<li>Foreign Exchange transactions.<\/li>\n<li>Clearing transactions.<\/li>\n<li>Verification of Merchant Banking Business.<\/li>\n<li>Verification of Credit Card \/ Debit card business.<\/li>\n<li>Conduct of employees, mis-selling of products, etc.<\/li>\n<li>Compliance to RBI guidelines and internal Policy guidelines issued from time to time.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>Chapter 21 Audits in Banks &#8211; CS Professional Banking Law and Practice Notes\u00a0is designed strictly as per the latest syllabus and exam pattern. Audits in Banks &#8211; CS Professional Banking Law and Practice Study Material Question 1. Write short note on long form audit report. Answer: Long Form Audit report (IFAR): Besides the normal audit &hellip;<\/p>\n<p class=\"read-more\"> <a class=\"\" href=\"https:\/\/gstguntur.com\/audits-in-banks-cs-professional-study-material\/\"> <span class=\"screen-reader-text\">Audits in Banks &#8211; CS Professional Study Material<\/span> Read More &raquo;<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","footnotes":""},"categories":[165],"tags":[],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/gstguntur.com\/wp-json\/wp\/v2\/posts\/22205"}],"collection":[{"href":"https:\/\/gstguntur.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gstguntur.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gstguntur.com\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/gstguntur.com\/wp-json\/wp\/v2\/comments?post=22205"}],"version-history":[{"count":1,"href":"https:\/\/gstguntur.com\/wp-json\/wp\/v2\/posts\/22205\/revisions"}],"predecessor-version":[{"id":22208,"href":"https:\/\/gstguntur.com\/wp-json\/wp\/v2\/posts\/22205\/revisions\/22208"}],"wp:attachment":[{"href":"https:\/\/gstguntur.com\/wp-json\/wp\/v2\/media?parent=22205"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gstguntur.com\/wp-json\/wp\/v2\/categories?post=22205"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gstguntur.com\/wp-json\/wp\/v2\/tags?post=22205"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}