The document titled “Bank Branch Statutory Audit – Comprehensive Audit Programme” provides a structured framework for conducting statutory audits of bank branches for a financial year ending on 31 March, typically conducted in April of the succeeding financial year. The programme is prepared under the Banking Regulation Act, 1949, Reserve Bank of India (RBI) guidelines, ICAI Standards on Auditing, and LFAR requirements, and is intended for internal audit use by auditors conducting bank branch audits.
The programme is divided into multiple sections that guide auditors from pre-audit planning to final reporting and documentation.
Pre-Audit Planning and Preliminary Work
The audit begins with pre-audit planning and assignment acceptance. Auditors are required to review the appointment letter, confirm independence in accordance with professional standards, execute an engagement letter, and verify compliance with RBI rules for appointment of statutory auditors. They must assemble the audit team, review prior-year audit reports, LFAR, management letters, and RBI inspection reports, and assess key risks such as credit concentration, MSME exposure, fraud risk, and system changes. Materiality is determined using benchmarks such as a percentage of advances or total assets.
Before visiting the branch, auditors perform preliminary analytical work, including obtaining the trial balance, NPA lists, deposit maturity profiles, and CBS data. They also review concurrent audit reports, inspection reports, and other documentation to identify unresolved issues. Analytical procedures comparing ratios such as net interest margin, credit-deposit ratio, NPA percentage, and cost-to-income ratio with prior years are also performed.
Branch Visit Procedures
During the branch visit, auditors conduct an opening meeting with branch management, verify the physical closing balances with CBS records, and examine registers related to powers of attorney, mandates, and complaints. They also review compliance with internal control procedures, branch policies, and statutory display requirements, and assess staff strength relative to sanctioned positions.
Cash, Advances, and Asset Quality
The audit includes detailed verification of cash and cash equivalents, such as physical cash counts, vault controls, ATM balances, currency chest operations, and reconciliation of balances with RBI or other banks. Inter-branch accounts and unreconciled entries are also examined.
A major focus area is the advances portfolio, where auditors verify loan sanctions, documentation, security creation, insurance coverage, credit appraisal processes, and drawing power calculations. Sampling typically includes large accounts, NPA accounts, overdue accounts, and standard accounts. Special attention is given to priority sector lending categories such as agriculture, MSME, education, and housing, including compliance with schemes like PMEGP, Mudra, and PM-SVANidhi.
For large borrowal accounts, auditors verify financial statements, stock audits, CRILC reporting, early warning signals, restructuring cases, and proceedings under insolvency processes where applicable. Written-off accounts and recoveries are also reviewed.
NPA Classification and Provisioning
The programme requires auditors to verify non-performing asset (NPA) classification and provisioning under RBI’s prudential norms. Accounts overdue for more than 90 days are checked for correct classification. NPAs are categorised as sub-standard, doubtful (D1, D2, D3), or loss assets based on the duration of default. Provisioning requirements vary depending on whether assets are secured or unsecured. Auditors also examine special mention accounts, interest suspense balances, fraud accounts requiring full provisioning, and provisioning for restructured accounts. Any differences identified during the audit are recorded in a Memorandum of Changes (MOC).
Deposits, Income, and Expenses
Auditors verify deposit schedules, interest rates applied to deposits, premature withdrawal penalties, and tax deducted at source on interest payments. Dormant accounts, unclaimed deposits transferred to the Depositor Education and Awareness Fund, and compliance with FEMA for foreign currency deposits are also reviewed.
Interest income and expenditure are tested using analytical procedures. Auditors verify interest reversal on NPA accounts, ensure income on NPAs is recognised only on a cash basis, and confirm correct accounting of fees, commissions, and other income. Expense verification includes staff costs, lease and rent payments, depreciation, capital expenditure classification, and GST compliance.
Investments, Contingent Liabilities, and Compliance
Investment portfolios are examined to ensure proper classification into HTM, AFS, and HFT categories, correct mark-to-market valuation, and compliance with RBI limits such as the cap on HTM investments. Repo transactions, interest income from investments, and SLR compliance are also reviewed.
Off-balance-sheet items such as bank guarantees, letters of credit, co-acceptances, and forward exchange contracts are verified. Auditors also identify contingent liabilities such as legal disputes or claims against the bank.
The programme further includes verification of KYC, AML, and CFT compliance, including documentation checks, suspicious transaction reporting, cash transaction reporting, beneficial owner identification, and monitoring of accounts with incomplete KYC.
IT Controls and Regulatory Reporting
Auditors assess information systems and IT controls, including access controls, segregation of duties, audit trails, backup and disaster recovery plans, cyber-security incidents, ATM reconciliation, and vendor access controls.
The audit also covers verification of regulatory returns submitted to authorities such as RBI, FIU-IND, GSTN, and the Income Tax Department. These include BSR returns, CRR and SLR reports, CRILC reporting, fraud reporting, GST returns, and TDS filings.
Reporting and Documentation
The final stages involve preparation of the Long Form Audit Report (LFAR), evaluation of findings, and preparation of the audit report. Auditors classify adjustments in the Memorandum of Changes and discuss them with branch management. Depending on materiality and the nature of misstatements, the auditor determines whether the audit opinion is unmodified or modified.
Working papers must be properly indexed and maintained, containing documents such as the engagement letter, risk assessments, trial balances, NPA lists, and audit reports. These records must be retained for at least seven years and maintained confidentially. The programme also emphasises completing all documentation, obtaining management representation letters, and conducting a closing meeting with branch management before submitting the final audit report.
The document concludes by stating that the programme is intended as a guidance framework and should be customised according to the specific branch, bank, and regulatory environment.
Author Bio
