Anand Rathi + Ernst & Young: A Real-World Forensic Audit Lesson for CA Students

When a listed stockbroker like Anand Rathi Share and Stock Brokers appoints a Big-Four firm such as Ernst & Young LLP to conduct a forensic audit, it is not just corporate news — it is a live classroom for every CA student studying forensic accounting, auditing standards, or ethics. Let us walk through what this kind of engagement really looks like, step by step, the way a senior teacher would explain it on a whiteboard.

---

Why Would a Board Commission a Forensic Audit?

A board of directors does not call in forensic specialists for routine compliance. A forensic audit is typically triggered by one or more of the following:

  • A whistleblower complaint alleging fraud or misappropriation
  • A regulatory query from SEBI or a stock exchange seeking clarification on fund flows
  • An internal red flag spotted by the statutory auditor or the audit committee
  • A media report or investor complaint that raises questions about transactions
  • A court order or arbitration proceeding requiring independent fact-finding

In the context of a stockbroker, the concern often revolves around client funds, securities held in trust, or trading irregularities — areas that SEBI watches closely because investor protection is at the heart of its mandate.

---

What Does a Board-Commissioned Forensic Engagement Actually Look Like?

Step 1 — Defining the Scope

This is the single most important document in the entire engagement: the Terms of Reference (ToR). The board or audit committee sits with the forensic team and answers:

  • What period should be examined (say, the last two or three financial years)?
  • Which business units, accounts or systems are in scope?
  • What specific allegations or concerns need to be addressed?
  • Is the objective merely to find facts, or does the board also want the team to quantify losses and identify responsible individuals?

A well-drafted ToR protects everyone — the firm doing the audit, the board that commissioned it, and eventually the regulator who will read the report. Vague scope leads to disputed conclusions.

Step 2 — Assembling the Forensic Team

A Big-Four forensic engagement typically involves:

  • Forensic accountants who can reconstruct transactions from ledgers, bank statements and trading logs
  • Digital forensics / e-discovery specialists who preserve and analyse email trails, deleted files and system logs
  • Legal advisors who ensure evidence is gathered in a manner that will hold up before a tribunal or court

For CA students: notice how this is a multi-disciplinary exercise. Pure accounting knowledge is necessary but not sufficient.

Step 3 — Evidence Gathering

Forensic evidence must satisfy the twin tests of authenticity and reliability. Common methods include:

  • Document preservation — imaging servers and devices before any alteration can happen
  • Transaction tracing — mapping fund flows across multiple accounts and entities using bank statements and system-generated reports
  • Interviews — structured conversations (not interrogations) with relevant employees, conducted with proper documentation
  • Data analytics — using software to detect anomalies like round-tripping, unusual timing of entries, or outlier transactions

Every piece of evidence is logged in a chain of custody record so that no one can later claim the evidence was tampered with.

Step 4 — Reporting

The final forensic report goes to the audit committee or the full board — not to management, especially if management is itself under scrutiny. The report typically covers:

  • Factual findings (what the team found)
  • Root-cause analysis (how and why it happened)
  • Financial impact (if quantifiable)
  • Recommendations for remediation and controls

In SEBI-regulated entities, the board may be required to share this report with the regulator. Students should verify the exact disclosure obligations in the latest SEBI circulars and ICAI study material, as these rules are updated periodically.

---

The Golden Rule: Independence

This is where many students slip up in exams. Independence in a forensic audit is governed by the same fundamental principles as in statutory audit — objectivity, integrity and absence of conflict of interest — but it has some unique dimensions:

  • The forensic firm cannot have a pre-existing relationship with the entity that compromises its objectivity (for example, if it is also the statutory auditor of the same entity for the period under scrutiny, independence becomes a serious concern — always verify the specific rules applicable under ICAI and SEBI guidelines for each situation).
  • The forensic team should have no financial interest in the outcome of the investigation.
  • Reporting lines must flow to the audit committee, not to the CFO or CEO whose actions may be under review.
  • Team members must disclose any personal relationships with the company's employees.

In simple terms: the forensic auditor works for the truth, not for the party that signs the cheque.

---

Key Takeaways for Your CA Exam

  • Forensic audit ≠ statutory audit. The purpose, scope and evidence standards are different.
  • Scope definition (Terms of Reference) is the foundation of the entire engagement.
  • Independence is non-negotiable and multi-layered in forensic work.
  • Digital evidence preservation (chain of custody) is a critical procedural requirement.
  • In listed entities, SEBI oversight adds an additional regulatory layer to the engagement.
  • Always verify current thresholds, section numbers and disclosure rules in the latest ICAI study material and SEBI announcements, as these change.

---

FAQs

Q1. Can the statutory auditor of a company also conduct its forensic audit? This raises significant independence concerns. While there is no absolute universal bar, having the same firm perform both roles — especially when the forensic audit covers the same period as the statutory audit — creates an obvious self-review threat. The ICAI Code of Ethics and SEBI regulations provide guidance here; always check the latest version.

Q2. Is forensic accounting a separate subject in the CA curriculum? Forensic accounting concepts appear in the CA Final Advanced Auditing and Professional Ethics paper. Topics include fraud risk factors, evidence gathering, reporting and professional scepticism. Verify the exact syllabus coverage in the current ICAI study material for your batch.

Q3. How is 'scope creep' managed in a forensic engagement? If the investigation uncovers issues beyond the original Terms of Reference, the forensic team must go back to the audit committee and get the scope formally expanded. Proceeding without authorisation would compromise the integrity of the engagement and could create legal complications for the firm.

---

Real-world events like the Anand Rathi forensic appointment by Ernst & Young are exactly the kind of case studies that sharpen your understanding far beyond rote learning. To make sure you cover these applied topics systematically — without missing a single chapter — use the free day-by-day study planner at caparveensharma.com/free-planner?src=article. And for case-scenario-based practice that mirrors what examiners actually ask, explore the full course library at caparveensharma.com — where 36 years of CA teaching experience meets a format built for how today's students actually learn.