Bank Branch Audit

It is the annual, RBI-mandated examination of a bank branch's balance sheet, profit and loss account, advances, deposits, and regulatory compliance by an appointed Chartered Accountant, culminating in a signed audit report and a Long Form Audit Report (LFAR) covering asset quality and internal controls in structured detail. It is distinct from — and feeds into — the bank's overall (head office) statutory audit performed by the bank's Central Statutory Auditors.

For public sector banks, appointment flows through the annual RBI empanelment process, administered in coordination with ICAI, where eligible CA firms apply and are categorised by partner strength and experience. Banks then allot specific branches to empanelled firms, generally communicated closer to the financial year-end. For private sector and cooperative banks, appointment is typically made directly by the bank's board or audit committee, following the bank's own selection process, without going through the RBI panel route.

The LFAR is a structured, RBI-prescribed questionnaire that the branch statutory auditor completes in addition to the standard audit report. It covers areas such as asset quality, credit appraisal and sanctioning process adherence, adequacy of security documentation, housekeeping (reconciliation of suspense and sundry accounts), and general internal control observations. It is a key input for the bank's own management and for RBI's supervisory assessment of the branch, and it is reviewed by the bank's Central Statutory Auditors when consolidating branch-level reports into the bank's overall financial statements.

IRAC stands for Income Recognition, Asset Classification and Provisioning — the RBI framework that governs how every advance account must be classified (Standard, Special Mention Account, Sub-Standard, Doubtful, or Loss) based primarily on the number of days the account remains overdue, and the provisioning percentage required for each classification. IRAC testing is the technical core of a branch audit — it directly determines the bank's reported Gross and Net NPA figures and provisioning charge.

Most public sector bank branch audits are completed within a compressed window of roughly 3 to 10 working days per branch, depending on the branch's category (based on advances portfolio size and business volume) and the number of accounts requiring sampling. The exact deadline is set by the bank's head office to fit its own financial statement consolidation timeline after the financial year-end.

RBI prescribes minimum sampling norms for advances testing based on the branch's category and the number/value of outstanding accounts — larger and higher-risk branches require broader coverage. Within that mandatory minimum, the auditor should apply professional judgment to add risk-based selections: large exposures, restructured accounts, accounts with frequent excess drawings over sanctioned limits, and any accounts flagged in the previous year's LFAR or internal audit.

Misclassification understates or overstates the branch's (and consequently the bank's consolidated) Gross and Net NPA figures and the required provisioning charge — a potential material misstatement in the bank's financial statements. Depending on materiality and circumstances, this can trigger review by the bank's Central Statutory Auditors, RBI supervisory scrutiny of the bank, and professional consequences for the branch auditor including possible reference to ICAI's disciplinary mechanism in serious cases.

No. While both are attest engagements resulting in an audit opinion, bank branch audit operates under the Banking Regulation Act 1949 and RBI circulars, uses the LFAR reporting format specific to banking, and centres on IRAC-based advances classification — a methodology that does not exist in a standard company audit. A CA conducting bank branch audit needs specific familiarity with RBI's master directions and the banking sector's regulatory reporting expectations.

Concurrent audit is an ongoing, near-real-time review of a branch's day-to-day transactions and internal controls, conducted monthly or quarterly throughout the year, distinct from the once-a-year statutory branch audit. It is appointed separately by the bank (often through a different empanelled list) and reports to bank management on a more frequent cycle, focused on catching control lapses and irregularities as they occur rather than certifying year-end financial statements.

Yes. Cooperative bank and credit society audits are governed by the respective State Cooperative Societies Act read with RBI directions applicable to banking-licensed cooperatives, and follow a related but distinct compliance framework from commercial bank branch audit. PNPC's audit teams handle both, with the specific statutory references and reporting formats adjusted to the cooperative's governing law.

Stock and book-debt audit is a separate, periodic engagement — commonly quarterly or half-yearly — where an independent auditor physically verifies a borrower's inventory and receivables that secure a working capital facility (cash credit or overdraft), and confirms the borrower's own stock/book-debt statements to the bank are accurate. It is typically commissioned by the sanctioning or lead bank as part of ongoing credit monitoring, and is distinct from the annual branch statutory audit, though findings can inform the statutory auditor's advances testing.

At minimum: the branch trial balance and general ledger, cash book and vault registers, reconciliation statements for inter-branch and inter-bank accounts, complete loan files for sampled advances (sanction letter, security documents, account statements, stock/book-debt statements for working capital accounts), deposit registers, and the branch's own NPA classification and provisioning working papers. A branch that has these organised in advance materially shortens the compressed audit window.

RBI's empanelment and allotment framework, along with individual banks' own policies, generally builds in rotation considerations for branch auditors over time, though the specific tenure and rotation rules can vary by bank and by whether the branch falls under the RBI panel system or direct private-bank appointment. Firms should not assume indefinite continuity at a given branch and should track their own allotment history against the applicable bank's rotation policy.

SMA is an early-warning classification RBI requires banks to apply to standard accounts showing signs of stress before they slip into NPA — commonly tiered as SMA-0, SMA-1, and SMA-2 based on the extent of overdue days, well before the account crosses the threshold for Sub-Standard classification. Reviewing SMA-tagged accounts carefully during branch audit gives an early signal of accounts at risk of slipping into NPA in the near term, and is a standard part of advances testing and LFAR commentary.

A restructured account or one that has been granted a moratorium under RBI's applicable framework requires the auditor to verify that the restructuring was sanctioned through the bank's proper approval process, that any regulatory conditions attached to the restructuring were met, and that the account's classification (and any provisioning consequence of the restructuring itself) was applied correctly per RBI's specific norms for restructured assets, which can differ from the standard overdue-day-based classification.

Standard practice is to discuss draft findings with branch management before the report is finalised — this is to confirm facts (for example, whether documentation exists that was not produced during testing, or whether an account was regularised after the balance sheet date in a way relevant to disclosure), not to negotiate away a properly supported finding. Where disagreement persists on a matter of professional judgment, the auditor's report reflects the auditor's independent conclusion, supported by working papers.

This depends on the specific appointment. Banks are companies (or cooperative societies) whose threshold-based statutory tax audit under the Income Tax Act (the audit historically referenced as the Section 44AB tax audit under the erstwhile Income-tax Act 1961, now carried forward under the Income Tax Act 2025) is typically handled at the entity level by the bank's tax auditors rather than separately at each branch, though branch-level data feeds into that consolidated tax audit. Some engagements do ask branch auditors to certify specific branch-level annexures that feed the bank's overall tax audit — the exact scope should be confirmed from the appointment letter, not assumed.

Firms empanelled with multiple banks, or allotted several branches by the same bank, routinely face overlapping audit windows in the weeks after financial year-end. PNPC structures its audit teams and partner oversight for exactly this scenario — parallel branch coverage with a dedicated engagement lead for each branch and partner-level review built into the schedule, rather than a single team serially working through branches at the cost of depth or deadline compliance.

Beyond advances testing, the branch auditor reviews: cash handling and dual-custody controls over the vault and cash retention limits, reconciliation discipline over suspense and sundry accounts, adherence to sanctioned delegation-of-authority limits for loan approvals, KYC and anti-money-laundering documentation completeness, locker and safe-custody register maintenance, and general housekeeping — all of which feed directly into the LFAR's internal control section.

A statutory audit is designed to provide reasonable assurance on the financial statements and specific LFAR matters through testing and professional judgment — it is not a guarantee against fraud, particularly fraud involving collusion or deliberate concealment that a properly planned and executed audit could not reasonably have been expected to detect. That said, auditors are expected to exercise professional scepticism, and where an audit is later shown to have been conducted without due care, the auditor can face professional and, in serious cases, regulatory consequences.

Firms generally have limited ability to decline an RBI-panel allotment once accepted through the empanelment process, though genuine conflict-of-interest situations (for example, a partner or close relative having a material interest in the branch or a major borrower there) must be disclosed and typically result in reallocation. For direct private-bank or cooperative-bank appointments, acceptance is a matter of the engagement letter negotiated between the firm and the bank before the audit begins.

Gross NPA is the total outstanding balance of all advances classified as Sub-Standard, Doubtful, or Loss under IRAC norms, before deducting provisions held against them. Net NPA is Gross NPA less the specific provisions the bank has already made against those accounts. Because branch-level classification and provisioning testing directly feed the bank's consolidated Gross and Net NPA figures, accuracy at the branch audit stage has a direct, aggregable effect on the bank's headline asset-quality metrics reported to RBI, investors, and the public.

For public sector bank branches allotted through the RBI/empanelment route, audit fees are generally fixed by the bank/RBI framework based on branch category, rather than freely negotiated between the firm and the branch. For private sector and cooperative bank direct appointments, fees are agreed between the firm and the bank as part of the engagement letter. PNPC confirms the applicable fee basis for each engagement at the outset — we do not treat this as a negotiable variable once an engagement begins.

Yes, where the branch has priority sector exposure. RBI requires banks to classify eligible advances (agriculture, micro and small enterprises, export credit, and other specified categories) as priority sector lending against regulatory targets, and branch audit typically includes verification that the branch's PSL classification and reporting are supported by the underlying loan purpose and borrower eligibility documentation.

Branch audit typically includes a review of the locker register, rent recovery status, nomination and access-control records, and the safe-custody article register, to confirm the branch is maintaining these in line with RBI's customer service and operational guidelines. While not usually a high-value-testing area in monetary terms, lapses here are a standard LFAR reporting point.

We conduct a conflict check against the branch's major borrower list as soon as an allotment or appointment letter is received. Where PNPC has an existing advisory, tax, or audit relationship with a borrower whose account would be part of the sampled advances at that branch, we assess independence implications and, where appropriate, disclose or decline the specific portion of the engagement, consistent with ICAI's Code of Ethics.

Because the audit certifies the branch's position as at the financial year-end (typically 31 March), cut-off testing — confirming that transactions are recorded in the correct accounting period and that year-end balances reflect genuine position rather than temporary window-dressing (for example, short-term deposits parked just before year-end and withdrawn immediately after) — is a standard and important part of the audit.

PNPC's core bank audit practice is focused on branch-level statutory audit, concurrent audit, and related engagements (stock audit, revenue audit, cooperative bank audit). Central Statutory Auditor appointments for the bank's overall consolidated financial statements are typically held by larger firms meeting RBI's specific CSA panel eligibility criteria; where relevant, PNPC can discuss the appropriate scope and referral for that separate engagement.

A typical branch audit team includes a partner or senior manager providing oversight and sign-off, one or more qualified CAs or experienced audit seniors leading advances testing and LFAR drafting, and article assistants or junior staff supporting reconciliation, documentation review, and working-paper preparation — sized to the branch category and the volume of accounts requiring testing within the allotted window.

Most Indian banks operate on a small number of common core banking system (CBS) platforms, and our audit teams are trained across the major ones. Where a branch operates a less common or bank-proprietary system, we build in additional planning time to understand the relevant MIS reports and account statement formats before testing begins, so system unfamiliarity does not compress the substantive testing time available.

The branch should present all relevant documentation and facts to the audit team promptly — payment records, correspondence, or evidence of regularisation — before the report is finalised. The auditor will consider all evidence presented and apply the RBI-prescribed classification criteria objectively. If, after full consideration, the auditor's professional judgment differs from the branch's view, the audit report reflects the auditor's independent conclusion.

PNPC has handled bank branch statutory audits, concurrent audits, and related banking-sector assignments across public sector, private sector, and cooperative banks since 1986. Our teams understand IRAC classification testing at a technical level, draft LFAR responses that are specific rather than templated, and are structured to deliver full audit depth within the genuinely compressed timelines that bank branch audit imposes. We are a practising CA firm with decades of banking-audit experience — not a generalist audit team applying a company-audit approach to a banking engagement.