Internal financial controls are the processes that make the numbers in the financial statements defensible — authorisations, reconciliations, cut-off, related-party capture and IT-dependent controls that sit under the ledger. For companies to which Section 143(3)(i) of the Companies Act applies, the auditor reports on the adequacy and operating effectiveness of those controls. The report is only as good as the walkthroughs and samples behind it.
N Avinash and Associates treats IFC as part of the assurance file, not a separate booklet written after the audit. Process maps, risk-control matrices and test results are prepared with the same partner who will sign the statutory opinion, so a control that fails in testing is also a finding in the audit issues list.
Scope of work
- Scoping of significant accounts, processes and locations for IFC / ICFR
- Walkthroughs of procure-to-pay, order-to-cash, inventory, payroll, treasury and financial-close cycles
- Risk-control matrices, including IT general controls that affect financial reporting
- Design evaluation and operating-effectiveness testing on a documented sample
- Deficiency grading (deficiency, significant deficiency, material weakness) with management comments
- Remediation follow-up before the auditor’s IFC opinion is finalised
- Board / audit-committee note on residual risk where a control cannot be remediated in the year
Companies in Shaikpet, Gachibowli and the wider Hyderabad region often have procedures that exist in practice but not on paper, or papers that do not match practice. IFC work closes that gap. Testing is timed so failed controls can be remediated before year-end, rather than disclosed as a surprise in the auditor’s report.
Where the entity is below the statutory IFC threshold, the same method is used as a management-requested controls review. The output is still a matrix, a test file and an issues list — usable if the company later crosses the threshold or a lender asks for comfort on controls.