When Regulatory Scrutiny Hits Subsidiary Accounts: A Practical Guide for Auditors

A few years ago, when major corporate groups faced enforcement action, one question kept haunting their statutory auditors: Did I miss red flags in my subsidiary audit? Today, we'll look at what SFIO investigation processes mean for auditors managing group accounts, especially when subsidiary irregularities emerge.

Understanding the SFIO's Role in Corporate Investigations

The Serious Fraud Investigation Office (SFIO) is India's specialist agency under the Ministry of Corporate Affairs, tasked with investigating suspected financial crime, fraud, and violations under the Companies Act, 2013. When SFIO opens a file on a large corporate group, auditors often find themselves in the crosshairs—not necessarily as accused, but as key witnesses whose audit judgements come under review.

SFIO doesn't investigate auditors automatically. Rather, when financial irregularities in subsidiaries or group entities are suspected, auditors' compliance with audit standards becomes part of the probe. The agency examines whether the statutory auditor met their obligation under Section 143 of the Companies Act to audit accounts and report significant findings to audit committees and regulators.

The Subsidiary Audit Challenge: Why It Matters Most

Subsidiary accounting is where many auditor concerns arise during SFIO probes:

Why subsidiaries complicate group audits:

  • Subsidiaries operate under separate management, sometimes in different sectors or geographies
  • Inter-company transactions (loans, guarantees, royalties) create opacity if not properly documented
  • Consolidation adjustments mask underlying transactions that may involve fraud or regulatory breach
  • Auditors of parent companies may have limited visibility into subsidiary books if the subsidiary is audited by a different firm

When SFIO investigates, it often uncovers that subsidiary accounts contained undisclosed related-party deals, inflated valuations, or circular fund flows that the parent company auditor should have flagged during group audit procedures.

What Statutory Auditors Must Do: The Compliance Checklist

If you're a statutory auditor managing accounts with significant subsidiaries, here's what regulators (and SFIO, if they come knocking) will examine:

1. Subsidiary Auditor Coordination

  • Did you obtain the subsidiary auditor's reports in time?
  • Did you communicate audit scope, material balances, and inter-company items clearly?
  • Did you visit the subsidiary or review enough evidence to satisfy yourself of its auditor's reliability?

2. Group Consolidation Procedures

  • Did you independently verify inter-company eliminations?
  • Did you test a sample of subsidiary transactions for substance and authorisation?
  • Did you challenge unusual or non-recurring items reported by subsidiaries?

3. Related-Party Disclosures

  • Did you identify all related parties (including subsidiaries' related parties)?
  • Were all transactions at market rates or, if not, properly disclosed and justified?
  • Did you report related-party balances and transactions as required under the Companies Act?

4. Audit Committee Reporting

  • Did you inform the audit committee of material subsidiaries and any auditor changes?
  • Did you report any limitations you faced in obtaining subsidiary information?
  • Did you disclose going concern risks affecting group entities?

How SFIO Examines Auditor Conduct

When SFIO investigates, they typically:

  • Request audit files: Detailed working papers on subsidiary audit scope and sampling
  • Interview auditors: About their procedures, timing of subsidiary visits, and basis for audit opinions
  • Cross-check discrepancies: Between subsidiary auditor reports and parent company financial statements
  • Review audit committee minutes: To see if material issues were raised and how the board responded
  • Examine communications: Between parent and subsidiary auditors regarding suspicious transactions

SFIO's interest is not punitive toward auditors unless they were complicit in fraud. Rather, they're establishing whether the auditor's opinion was reasonable given the evidence available and the audit procedures performed.

Real-World Scenario: Spotting Warning Signs in Subsidiaries

Imagine you're auditing a large infrastructure group with five operating subsidiaries. During your visit to a subsidiary, you notice:

  • Invoices from related vendors for services, but no corresponding contracts
  • High write-offs of receivables from related parties in the last week of the financial year
  • Dividend payments to the parent, funded by short-term loans from the parent (circular flow)

Your obligation: Document these observations. Test them further. If the subsidiary auditor cannot satisfactorily explain them, expand your procedures or qualify your group audit opinion. Do not simply accept the subsidiary auditor's word. Do not assume the finance team has valid business reasons if you haven't seen supporting evidence.

If you later discover these were fraudulent, SFIO will ask: Why didn't your audit procedures detect this? The answer must be grounded in audit standards and reasonable procedures, not hindsight.

The Impact of SFIO Scrutiny on Your Audit Practice

When an SFIO probe touches your client:

  • Expect extended procedures: You may need to retest prior-year transactions and update your risk assessment
  • Strengthen documentation: Every audit finding and its resolution must be clearly recorded
  • Communicate early: Inform the audit committee and management of any SFIO contact
  • Preserve independence: Do not advise management on how to respond to SFIO; that's counsel's role
  • Manage timing: Your subsequent audit may be delayed if SFIO has seized books or frozen accounts

Key Takeaways

  • Subsidiary audits are not delegated; they're coordinated. You remain responsible for the group opinion even if a different firm audits the subsidiary.
  • Inter-company transactions are high-risk areas. Allocate sufficient audit resources to testing related-party balances and transactions.
  • Documentation is your defence. If SFIO ever questions your procedures, your working papers must show that you exercised professional skepticism.
  • The audit committee is your ally. Transparent, timely reporting of subsidiary risks and audit limitations protects both the company and your firm's reputation.

FAQs

Q1: Can SFIO hold a statutory auditor liable for fraud they didn't detect?

A: SFIO's role is to investigate suspected fraud, not to prosecute auditors. However, if SFIO finds that an auditor failed to follow audit standards or was deliberately negligent in their procedures, the matter may be referred to the Institute of Chartered Accountants of India (ICAI) for disciplinary action. Auditors are expected to exercise reasonable professional skepticism, but are not guarantors of detecting all fraud.

Q2: What should I do if my subsidiary auditor is uncooperative or missing deadlines?

A: This is a red flag. Formally document the issue. Request the information in writing with a specific deadline. If the subsidiary auditor remains unresponsive, you may not be able to complete your group audit without qualifying your opinion. Notify the audit committee of the limitation and consider whether you can continue the engagement.

Q3: Does every related-party transaction in a subsidiary need to be disclosed in the parent company's notes?

A: Not every micro-transaction, but material or unusual related-party dealings must be disclosed. The threshold depends on the nature of the transaction and the company's size. During consolidation, subsidiary related-party transactions with entities outside the group must be visible. Verify in the latest ICAI guidance and the relevant accounting standard (Ind AS 24) for specific thresholds.

---

Auditing group accounts under regulatory scrutiny is demanding, but it's also an opportunity to strengthen your audit quality and protect your firm's credibility. Keep your procedures rigorous, your documentation clear, and your communication with the audit committee open. If you'd like help structuring your group audit procedures and subsidiary checklists, explore the free day-by-day study planner and case-scenario practice available on caparveensharma.com—practical tools designed for CA students managing real-world audit complexity.