Half-Yearly Internal Audit & Net Worth Certification (SEBI)

Stock brokers, clearing members, and sub-brokers registered with NSE, BSE, or MCX, as well as Depository Participants registered with NSDL and/or CDSL, are required to have their operations audited on a half-yearly basis by an independent Chartered Accountant, Company Secretary, or Cost and Management Accountant in practice, as mandated by SEBI circulars and the applicable exchange/depository bye-laws.

The two half-yearly cycles are April to September, and October to March, aligned to the Indian financial year. The internal audit report for each half-year is required to be submitted to the concerned exchange or depository within the timeline specified in the circular applicable to that period.

The audit checklist, as prescribed by the relevant exchange/depository circular, typically covers client onboarding and KYC compliance, segregation of client funds and securities from the intermediary's own funds and securities, margin collection and reporting, contract note and statement of account issuance, running account settlement practices, risk management system (RMS) controls, client complaint handling, and record retention and maintenance requirements.

Net worth certification is a separate deliverable in which a Chartered Accountant computes the intermediary's net worth using the specific formula prescribed under the applicable SEBI regulations and exchange/depository bye-laws — which differs from standard accounting net worth — and certifies whether it meets the minimum prescribed for that category of registration. The internal audit, by contrast, is a review of operational processes and controls. Both are required, but they are distinct engagements with different underlying methodologies.

The SEBI-prescribed net worth formula for market intermediaries starts from paid-up capital and free reserves, but then applies specific inclusions, exclusions, and adjustments — for example, adjustments relating to fixed assets, certain non-allowable or illiquid assets, and specified contingent liabilities — that are set out in the applicable regulations and bye-laws for that category of registration. The resulting figure can differ materially from the net worth shown in a standard balance sheet presentation.

Missing the notified submission deadline typically results in a penalty under the exchange's applicable penalty structure, and can also trigger disciplinary scrutiny or a compliance flag against the member. Repeated or prolonged non-submission is treated more seriously and can escalate to restriction on trading rights until the position is regularised.

A net worth shortfall against the prescribed minimum for your registration category is a serious compliance event. It is typically required to be reported, and the intermediary is expected to rectify the shortfall — commonly through additional capital infusion by promoters/partners — within a defined period, after which a revised net worth certificate is required. Continued non-compliance can result in restriction on further business or suspension of the registration in that segment.

In principle, internal audit and statutory audit are conceptually distinct engagements, and many intermediaries do use the same firm for both where no independence conflict arises under the applicable regulations and exchange bye-laws. Some exchange or depository circulars specify particular eligibility or rotation conditions for the internal auditor. We assess this on a case-by-case basis against the specific circular applicable to your registration.

The half-yearly internal audit obligation is generally attached to the registered trading/clearing member or depository participant, not to each individual Authorised Person or sub-broker operating under that member. However, the audit scope for the principal member typically extends to reviewing AP/sub-broker level compliance — KYC handled by the AP, funds routed through the AP, and complaints relating to the AP — as part of the member's own audit.

Risk Management System (RMS) review examines whether the intermediary's systems and controls for margin computation, exposure limits, and auto square-off of client positions are correctly configured and operating as intended. Given that RMS failures can directly result in client losses, exchange penalty exposure, or systemic risk to the broker's own capital, it is one of the more heavily weighted areas in the half-yearly audit checklist.

No — while both are half-yearly and both are internal audits in the general sense, the DP audit follows depository (NSDL/CDSL) bye-laws and checklist requirements specific to demat account operations — account opening/closing, transmission, nomination, pledge processing, and DP-level reconciliation — which are distinct from the broker-side checklist covering trading, margins, and contract notes. An intermediary holding both a broking registration and a DP registration needs both audits, though they can be coordinated and scheduled together.

For a mid-sized broking or DP operation, the typical cycle from the start of fieldwork to final report submission runs several weeks — covering checklist finalisation, sample selection and testing, draft findings and management response, and final sign-off. Larger, multi-location, or multi-segment operations take proportionately longer given the wider sample and reconciliation scope.

At a minimum: client bank account statements for the period, client fund and securities segregation reconciliations, a sample of client KYC files, contract notes/statements of account, the complaint register, margin collection reports, RMS configuration details, and — for DPs — demat account opening/closing and reconciliation records. The complete list is confirmed at the checklist finalisation stage based on your specific registration and segments.

The half-yearly internal audit report is submitted to the relevant exchange or depository as a regulatory compliance filing — it is not typically a document that is proactively published or shared with the intermediary's own clients. Exchanges and depositories use the report as part of their own supervisory oversight of registered members.

A serious finding such as a client fund or securities segregation breach is typically reported as a high/critical-severity observation, requiring immediate management attention and, depending on the exchange's reporting protocol and the severity of the breach, may itself trigger separate reporting obligations to the exchange outside the normal half-yearly cycle. This is treated as one of the most serious categories of finding because it goes directly to the safety of client money.

Generally, the obligation applies from the point of registration, and even a partial-period first cycle typically still requires the intermediary's operations for that period to be covered in the audit, in line with the exchange's applicable circular for new registrants. The exact treatment of a part-period first cycle should be confirmed against the specific exchange circular applicable at the time of registration.

This depends on the specific exchange, depository, and segment — some prescribe that the internal auditor must satisfy stated eligibility criteria under the applicable circular, which may include panel or empanelment requirements in certain contexts; others simply require an independent Chartered Accountant, Company Secretary, or Cost and Management Accountant in practice without a formal panel mechanism. We confirm the exact eligibility requirement applicable to your specific registration before accepting an engagement.

Fees are quoted based on the scope of your registration — the number of segments, whether a DP function is also involved, transaction and client volume, and the complexity of your fund/securities flows — and confirmed in writing before the engagement begins. Many clients take PNPC on a standing half-yearly retainer covering both cycles for the year, which keeps the compliance calendar continuous rather than re-engaging afresh each cycle.

Yes, in the sense that exchanges specifically look for whether prior observations have been closed, and a pattern of repeat findings is itself treated as a heightened risk indicator by exchange supervisory teams — independent of whether each individual finding, taken alone, is serious. Bringing in a new auditor does not reset this history; the exchange's own records of your prior submissions persist.

No. The minimum net worth prescribed, and in some cases the precise computation formula, varies by category of registration — trading member, clearing member, depository participant, and other regulated categories each have their own regulatory net worth floor and, in some cases, segment-specific floors within a single category (for example, differing requirements for cash market versus derivatives segment membership).

This depends on how the applicable regulations for each registration category treat net worth adequacy for an entity holding multiple registrations — in some structures the same net worth base can be relied upon across registrations subject to meeting each category's specific minimum, while in others distinct computations or allocations may be expected. We review this specifically for the entity's combination of registrations rather than assuming a default treatment.

A typical SEBI net worth certificate states the basis of computation (referencing the applicable regulation), sets out the computed net worth with a summary of the key adjustments applied to arrive at that figure from the balance sheet base, confirms the figure against the prescribed minimum for the specific registration category and segment, and is signed and stamped by the certifying Chartered Accountant with their membership and Certificate of Practice details.

It can. Since the net worth computation is typically based on the audited financial statements, any qualification in the statutory auditor's report that affects asset valuation, provisioning, or classification of items relevant to the net worth formula can directly change the computed net worth figure — and, in a worst case, could contribute to or worsen a shortfall against the prescribed minimum.

Yes. Where fieldwork surfaces a correctable gap — for example, an incomplete KYC file, a reconciliation break, or a documentation lapse — before the report is finalised, we flag it to management immediately so it can be corrected within the audit period itself, rather than being reported as an open finding that then needs to be tracked and closed in the next cycle.

A provider engaged fresh each cycle typically starts without visibility into your prior observations, your specific segment-level net worth history, or your recurring operational patterns — increasing the risk of repeat findings going undetected, deadlines being tracked reactively rather than proactively, and the net worth computation being redone from scratch each time without the benefit of trend continuity.

For intermediaries with operations or branch offices across these cities, we can coordinate fieldwork across locations under a single engagement team rather than requiring separate local auditors at each branch. For groups with related entities or promoter interests in the UAE, our Dubai office provides continuity of relationship without needing to brief a separate firm on the group's structure.

This is exactly the starting point of our engagement — we begin with a registration and applicability mapping step that confirms your exact half-year audit periods, submission deadlines, and net worth certification timing based on your specific registration category, exchange(s), and segment(s), and set this up as a standing compliance calendar from Day 1.

The half-yearly internal audit specifically requires an independent Chartered Accountant, Company Secretary, or Cost and Management Accountant in practice — it cannot be performed by your own internal finance team, by design, because independence from the function being reviewed is the entire point of the requirement. An in-house team can and should maintain the underlying records well (which materially speeds up the audit), but the audit and net worth certification itself must be an independent, external engagement.

The core areas — KYC, fund/securities segregation, margins, contract notes, complaints, and record-keeping — are broadly common across segments, but the specific margin computation rules, exposure limit norms, and certain reporting formats differ between cash market, equity derivatives, currency derivatives, and commodity derivatives segments. Where an intermediary operates in multiple segments, the checklist is expanded to cover each segment's specific requirements rather than applying a single generic checklist across all of them.

A running account is the arrangement, with the client's explicit written authorisation, under which a broker retains a client's surplus funds and/or securities across settlement cycles rather than paying them out after every single trade, subject to periodic mandatory settlement within the timelines prescribed by SEBI and the exchange. The half-yearly audit specifically tests whether running account settlements have actually occurred within the prescribed periodicity and whether client authorisations are properly documented — because running accounts, if not settled on time, are a common vector for co-mingling client funds with the broker's own funds.

A substantial part of the fieldwork — reconciliation review, KYC file sampling, contract note testing, RMS configuration review — can be conducted using digital extracts and remote access to systems and records, provided the intermediary can produce clean, complete data extracts for the audit period. Some intermediaries prefer an on-site component for the walkthrough of physical records or system demonstrations, which we accommodate based on the client's location and preference.

An internal audit report with no significant adverse observations, or only minor observations with agreed remediation, is generally treated as a clean cycle. A report carrying significant, high-severity, or repeat observations is viewed by the exchange with materially greater concern, and can influence the intermediary's ongoing risk categorisation and the intensity of any future exchange-level inspection. There is no formal 'qualified opinion' concept exactly as in statutory audit, but the practical effect of a report full of unresolved high-severity findings is comparable in terms of regulatory attention it draws.