GNIA Telecom
GNIA Telecom
ON
INTERNAL AUDIT OF
TELECOMMUNICATION
INDUSTRY
Chapter 1
Internal Audit- An Introduction
1.1 Definition of Internal Audit
The need for internal audit is to provide independent assurance that the organization’s risk
management, governance and internal control processes are operating effectively and efficiently. The
adequacy of internal audit and internal control is prerequisite for the efficient management and control
of an organization.
Internal audit is a significant tool in evaluating the adequacy of system controls and points out the state of
compliance with the applicable laws and regulations, policies and procedures and ensures risk
management and promote efficiency.
The term Internal Audit has been defined by the Institute of Internal Auditors (IIA) as under:
"Internal auditing is an independent, objective assurance and consulting activity designed to add value
and improve an organization's operations. It helps an organization accomplish its objectives by bringing
a systematic, disciplined approach to evaluate and improve the effectiveness of risk management,
control, and governance processes”.
a) Audit schedule: The audit schedule is a program to chalk out a timetable after discussions with
the auditee before taking up an internal audit and identify the functions/ areas in the
organization to be audited. The audit Incharge guides the effort to ensure that the different
processes are included in the audit. The audit schedule gives an insight about type of resources
needed for the audit. A well-defined audit schedule yields the desired results within the
scheduled time frame of audit.
b) Audit plan: A well-defined audit plan covers scope of audit, time frame of audit, objectives and
agenda. The plan provides a list of events of the audit from its commencement to its
completion. It also provides the specific processes and sub-processes which will be audited,
when will be audited and by whom including the core areas that will be audited in each segment
/ function.
c) Audit management: The audit in-charge shall manage the overall audit process including
supervising and communicating any changes/ modifications in the audit plan, sharing the audit
progress with the Board, the Audit Committee, and Executive Management or to such other
person who is authorized. The audit in-charge shall also, ensure that these are carried our as per
the audit schedule and stays on track. In case of any non-conformity, the audit in-charge shall
ensure that these are logical, valid and clear. Any sort of conflicts shall be addressed and solved
constructively by ensuring that the entire audit is conducted professionally and ethically and
completed within the stipulated time.
d) Audit Verification: The department or function or activity, subject to audit is usually supposed
to respond to audit nonconformities by the mutually agreed date. The response should include
identification of the root cause, planned corrective action and a date when the nonconformities
shall be removed. The audit in-charge reviews the responses to ensure that the planned
corrective actions are adequate. When the Project is undertaken by the auditee to eliminate the
root cause or fails to identify root cause or proposes a corrective action related to it, the audit
in-charge can reject the response and communicate causes /reasons to the manager-of-the-
process as to why the action taken on the matter by the auditee is not satisfactory. The second
stage of verification occurs when the manager-of-the-process informs the audit in-charge that
corrective action has been taken. Based on the action taken report of auditee the audit in-
charge or his team member verifies that the corrective action has been taken and the root cause
of the original nonconformity has been removed.
e) Audit reporting: The Board, the Audit Committee, and Executive Management or the person
who is authorized is presented with the written audit observations/ suggestions and informed
about the issues which needs action on the part of the Board, the Audit Committee, and
Executive Management etc on certain non-conformities which guides the basis for discussion of
the audit results and when remains unattended forms part of the audit report.
Thus Internal Audit is a tool to provide an independent assessment and view of state of the business,
monitors risks and ensures compliance across organizational and the use of system software make the
internal audit more effective and successful. However an effective common framework is required to
carry out the Internal Audit for all types of audits - financial, risk, operations, internal, suppliers, and
compliance. The auditing priorities are determined for the enterprise-level risk-management.
An internal control system, no matter how well conceived and operated, can provide only reasonable —
not absolute— assurance to management and the board regarding achievement of an entity’s
objectives. The likelihood of achievement is affected by limitations inherent in all internal control
systems. These include the realities that judgments in decision-making can be faulty, and the
breakdowns can occur because of simple error or mistake.
The Internal control systems operate at different levels of effectiveness which can be judged in following
three categories, where the board of directors and management has reasonable assurance that they:
understand the extent to which the entity’s operations objectives are being achieved.
believe that the published financial statements are being prepared reliably.
believe that the applicable laws and regulations are being complied with scrupulously by the
organization.
COSO’s internal control framework describes internal controls that consist of five inter-related
components. These are generally called “layers” and controls within each layer must be included in
management’s assessment. The five layers described by COSO are:
a. Control Environment: The control environment sets the tone of an organization, influencing the
control consciousness of its people. It is the foundation for all other components of internal control e.g.,
providing discipline and structure. Control environment comprises integrity, ethical values, and
competence of the entity’s people; management’s philosophy and operating style; management system
that assigns authority and responsibility, organizes and develops its people; and the attention and
direction provided by the board of directors.
b. Risk Assessment: Every entity faces a variety of risks from external and internal sources that must be
assessed. A precondition to risk assessment is establishment of objectives, linked at different levels and
internally consistent. Risk assessment is the identification and analysis of relevant risks that may hinder
the achievement of the objectives and forming the basis to determine how the risks can be managed.
Because economic, industry, regulatory, and operating conditions will continue to change, therefore
mechanisms are needed to identify and deal with the special risks associated with such changes.
c. Control Activities: Control activities are the policies and procedures that help ensure management
directives are carried out. They help in ensuring that necessary actions are taken to address risks
associated with attaining the entity’s objectives. Control activities occur throughout the organization, at
all levels and in all functions. Control activities are range of diverse activities such as approvals,
authorizations, verifications, reconciliations, reviews of operating performance, security of assets and
delegation of duties.
d. Information and Communication: This is essential that the pertinent information must be identified,
captured and communicated in a form and time frame that enable people to carry out their
responsibilities. The information system should produce reports containing operational, financial, and
compliance-related information that make possible to run and control the business. The internal
auditors deal not only with internally generated data, but also includes information about external
events, activities, and conditions necessary to informed business decision-making and external
reporting.
Effective communication must occur in broader areas, flowing down, across, and up the organization. All
personnel must receive a clear message from top management that responsibilities must be taken
seriously by the middle and lower management level and they must understand their own role in the
internal control system, as well as how individual activities relate to the work of others. They must have
a means of communicating significant information upstream. In the organization effective
communication not only within the organization but also with external parties, such as customers,
suppliers, regulators and shareholders. They must understand their own role in the internal control
system, as well as how individual activities relate to the work of others. They must have a means of
communicating significant information upstream. It is essential to have effective communication within
the organization not only the upstream but also downstream communications.
e. Monitoring: Internal control systems need to be monitored — a process that assesses the
quality of the system’s performance over time. This is accomplished through ongoing
monitoring activities, separate evaluations, or a combination of the two. Monitoring occurs in
the course of operations, includes regular management and supervisory activities, and other
actions personnel take in performing their duties. The scope and frequency of separate
evaluations will depend primarily on an assessment of risks and the effectiveness of ongoing
monitoring procedures.
The internal audit approach assists in assessing and improving the effectiveness of the organization’s
internal control system. Where internal controls are not adequate and reliable Internal Audit should
make practical recommendations to ensure that these controls are improved. Internal Audit evidence
should be adequate to meet the objectives of Audit assignments.
The prime purpose of a systems Audit should be to evaluate the extent to which the system may be
relied upon to ensure that the objectives of the system are met.
Internal Auditors should be satisfied with the nature, adequacy and relevance of Audit evidence before
placing reliance on that evidence. Information should be collected analyzed and documented by the use
of appropriate Audit techniques. The production of Audit evidence should be supervised and reviewed
by the Head of Internal Audit. To meet an acceptable standard the evidence should be sufficiently
adequate and convincing to the extent that a prudent, informed person would be able to appreciate
how the Auditor’s conclusions were reached.
Internal Audit should also complement its approach with other techniques, e.g.:
Performance auditing
Control self assessment
Advice and assistance on control issues
Helping with risk management.
Conclusions are the Internal Auditor’s evaluations of the effects of the findings on the particular system
reviewed. The internal auditors should:
Put the findings in perspective based on the overall implications and significance of the
weaknesses identified
Identify the extent to which the system’s control objectives are being achieved and the degree
to which the internal control should ensure that the goals and objectives of the organization are
accomplished effectively and efficiently.
Management and Internal Auditor should agree to the responsibility of audit and target dates for
implementation of agreed recommendations. The responsibility for final editing of Audit reports should
remain with the Head of Internal Audit who should always retain the right to issue reports without
further editing.
The internal Auditor should periodically follow up Audit reports to review and test the implementation
of agreed Internal Audit recommendations. Follow-up activity is the process by which Internal Audit
confirms that agreed recommendations have been implemented by line managers.
The Head of the Internal Audit should submit to the CFO/CEO and Audit Committee, at agreed intervals,
a report of Internal Audit activity and results. The report should compare actual Internal Audit activity
against the annual Internal Audit plan and should clearly indicate the extent to which the total Internal
Audit needs of the organization have been met. In the annual Internal Audit Report the Head of the
Internal Audit should give a formal opinion to the CFO/CEO and Audit Committee on the extent to which
reliance can be placed on the organization’s internal control system. The attention of the CFO/CEO and
Audit Committee should be drawn to any major Internal Audit findings where action appears to be
necessary but has not been initiated.
Terms of engagement provide the internal auditor with requisite authority, including unrestricted access
to all departments, records, property and personnel and authority to call for information from
concerned personnel in the organization.
The Terms of engagement should clearly mention that internal auditor would not be involved in the
preparation of the entity’s financial statements. It should also be made clear to the Board of Directors or
a relevant Committee or such other person(s) as may be authorized by the Board that the internal audit
would not result in the expression of an opinion or any other form of assurance on the entity’s financial
statements or any part thereof.
The internal auditor should have full authority on his processes/ hardware/ systems and audit tools he
may use in course of performing internal audit. It should be clear that the ownership of working papers
rests with internal auditor and not the entity, however its use shall be limited to the internal audit of the
entity or matter relating to it or there is a statutory or a regulatory requirement to do so. It should
contain a statement that the internal audit engagement would be carried out in accordance with high
professional standards and ethics applicable to such audit.
The engagement letter of the internal auditor should contain a condition that the report of internal
auditor should not be distributed or circulated by the entity or the internal auditor to any party other
than that mutually agreed between the internal auditor and entity unless there is a statutory or a
regulatory requirement to do so.
The engagement letter of the internal auditor should indicate that the internal auditor would be
compensated, including any out of pocket expenses, travelling expenses, taxes etc. for the services
rendered by the internal auditor including the audit team members.
Professional internal auditors are required to be independent of the business activities of the entity to
which they audit. The internal auditor should also be impartial and free of any interest which is
incompatible to integrity and objectivity and inform the entity (auditee) of any personal or external
factors that impede or likely to impede the independence and objectivity if required remedial action can
be taken.
Generally the internal auditors are part of company management and paid by the company. The internal
audit activity of the entity is basically reviewing the matters which are critical to the entity due to the
oversight of management's activities. The internal auditors should also take reasonable professional care
in specifying evidence required, in gathering and evaluating the evidence its reporting in the findings.
They need to remain alert to the instances that could indicate errors, fraud, etc. To provide
independence, most Internal auditors report to the Chairman of Board or the chairman of the Audit
Committee or some other person authorized by the management of the entity.
While evaluating the adequacy and effectiveness of systems and processes of an entity, the internal
auditor should act independent of the business activities and be honest and sincere to the assignment,
unbiased and should not compromise integrity, objectivity and hold a neutral position within the
177. (1) The Board of Directors of every listed company and such other class or classes of companies, as
may be prescribed, shall constitute an Audit Committee.
(2) The Audit Committee shall consist of a minimum of three directors with independent directors
forming a majority:
Provided that majority of members of Audit Committee including its Chairperson shall be persons with
ability to read and understand, the financial statement.
(3) Every Audit Committee of a company existing immediately before the commencement of this Act
shall, within one year of such commencement, be reconstituted in accordance with sub-section (2).
(4) Every Audit Committee shall act in accordance with the terms of reference specified in writing by the
Board which shall, inter alia, include,—
(i) the recommendation for appointment, remuneration and terms of appointment of auditors of the
company;
(ii) review and monitor the auditor’s independence and performance, and effectiveness of audit
process;
(iii) examination of the financial statement and the auditors’ report thereon;
(iv) approval or any subsequent modification of transactions of the company with related parties;
(v) scrutiny of inter-corporate loans and investments;
(vi) valuation of undertakings or assets of the company, wherever it is necessary;
(vii) evaluation of internal financial controls and risk management systems;
(viii) monitoring the end use of funds raised through public offers and related matters.
(5) The Audit Committee may call for the comments of the auditors about internal control systems, the
scope of audit, including the observations of the auditors and review of financial statement before their
submission to the Board and may also discuss any related issues with the internal and statutory auditors
and the management of the company.
(6) The Audit Committee shall have authority to investigate into any matter in relation to the items
specified in sub-section (4) or referred to it by the Board and for this purpose shall have power to obtain
professional advice from external sources and have full access to information contained in the records of
the company.
(7) The auditors of a company and the key managerial personnel shall have a right to be heard in the
meetings of the Audit Committee when it considers the auditor’s report but shall not have the right to
vote.
(8) The Board’s report under sub-section (3) of section 134 shall disclose the composition of an Audit
Committee and where the Board had not accepted any recommendation of the Audit Committee, the
same shall be disclosed in such report along with the reasons thereof.
Section 134 (3) (n) states that the Board of Directors’ Report would include a statement indicating
development and implementation of risk management policy for the Company including identification
therein of elements of risk, if any, which in the opinion of the Board may threaten the existence of the
Company.
As per Section 134 (5) Directors’ Responsibility Statement referred to in clause (c) of sub-section (3)
shall state that— ... (b) the directors had selected such accounting policies and applied them consistently
and made judgments and estimates that are reasonable and prudent so as to give a true and fair view …;
(c) the directors had taken proper and sufficient care for the maintenance of adequate accounting
records in accordance with the provisions of this Act for safeguarding the assets of the company and for
preventing and detecting fraud and other irregularities; .. (e) the directors, in the case of a listed
company, had laid down internal financial controls to be followed by the company and that such internal
financial controls are adequate and were operating effectively. Explanation.—For the purposes of this
clause, the term “internal financial controls” means the policies and procedures adopted by the company
for ensuring the orderly and efficient conduct of its business, including adherence to company’s policies,
the safeguarding of its assets, the prevention and detection of frauds and errors, the accuracy and
completeness of the accounting records, and the timely preparation of reliable financial information; (f)
the directors had devised proper systems to ensure compliance with the provisions of all applicable laws
and that such systems were adequate and operating effectively.
Section 138(1) makes internal audit mandatory and provides that such class or classes of companies as
may be prescribed shall be required to appoint an internal auditor, who shall either be a chartered
accountant or a cost accountant, or such other professional as may be decided by the Board to conduct
internal audit of the functions and activities of the company.
The class or classes of companies have been defined under the Companies (Accounts) Rules, 2014 issued
under Section 138(1) as follows:
Rule 13. Companies required to appoint internal auditor: (1) The following class of companies shall be
required to appoint an internal auditor or a firm of internal auditors, namely:-
a. every listed company;
b. every unlisted public company having-
(i) paid up share capital of fifty crore rupees or more during the preceding financial year; or
(ii) turnover of two hundred crore rupees or more during the preceding financial year; or
(iii) outstanding loans or borrowings from banks or public financial institutions exceeding one
hundred crore rupees or more at any point of time during the preceding financial year; or
(iv) outstanding deposits of twenty five crore rupees or more at any point of time during the
preceding financial year; and
c. every private company having-
(i) turnover of two hundred crore rupees or more during the preceding financial year; or
(ii) outstanding loans or borrowings from banks or public financial institutions exceeding one
hundred crore rupees or more at any point of time during the preceding financial year.
The Audit Committee of the company or the Board shall, in consultation with the Internal Auditor,
formulate the scope, functioning, periodicity and Methodology for conducting the internal audit.
Section 138(2) provides that The Central Government may, by rules, prescribe the manner and the
intervals in which the internal audit shall be conducted and report to the Board.
Under Section 144 an auditor shall not provide any of the following services (whether such services are
rendered directly or indirectly to the company or its holding company or subsidiary company, namely:—
(a) accounting and book keeping services; (b) internal audit; (c) design and implementation of any
financial information system; (d) actuarial services; (e) investment advisory services; (f) investment
banking services; (g) rendering of outsourced financial services; (h) management services; and (i) any
other kind of services as may be prescribed by the Central Government.
Corporate Responsibility for Financial Reports (Under Section 302 of Sarbanes Oxley Act of
2002).
(a) Regulations Required.—The Commission shall, by rule, require, for each company filing periodic
reports under section 13(a) or 15(d) of the Securities Exchange Act of 1934 [15 U.S.C. 78m, 78o(d)], that
the principal executive officer or officers and the principal financial officer or officers, or persons
performing similar functions, certify in each annual or quarterly report filed or submitted under either
such section of such Act that—
(1) the signing officer has reviewed the report;
(2) based on the officer’s knowledge, the report does not contain any untrue statement of a material fact
or omit to state a material fact necessary in order to make the statements made, in light of the
circumstances under which such statements were made, not misleading;
(3) based on such officer’s knowledge, the financial statements, and other financial information included
in the report, fairly present in all material respects the financial condition and results of operations of the
issuer as of, and for, the periods presented in the report;
(5) the signing officers have disclosed to the issuer’s auditors and the audit committee of the board of
directors (or persons fulfilling the equivalent function)—
(A) all significant deficiencies in the design or operation of internal controls which could adversely
affect the issuer’s ability to record, process, summarize, and report financial data and have identified
for the issuer’s auditors any material weaknesses in internal controls; and
(B) any fraud, whether or not material, that involves management or other employees who have a
(6) the signing officers have indicated in the report whether or not there were significant changes in
internal controls or in other factors that could significantly affect internal controls subsequent to the
date of their evaluation, including any corrective actions with regard to significant deficiencies and
material weaknesses.
(b) Foreign re-incorporations have no effect.—Nothing in this section 302 shall be interpreted or applied
in any way to allow any issuer to lessen the legal force of the statement required under this section 302,
by an issuer having reincorporated or having engaged in any other transaction that resulted in the
transfer of the corporate domicile or offices of the issuer from inside the United States to outside of the
United States.
(c) deadline—The rules required by subsection (a) shall be effective not later than 30 days after the date
of enactment of this Act.
Management Assessment of Internal Controls (Under Section 404 of Sarbanes Oxley Act of
2002).
(a) Rules Required.—The Commission shall prescribe rules requiring each annual report required by
section 13(a) or 15(d) of the Securities Exchange Act of 1934 (15 U.S.C. 78m or 78o(d)) to contain an
internal control report, which shall—
(1) state the responsibility of management for establishing and maintaining an adequate internal
control structure and procedures for financial reporting; and
(2) contain an assessment, as of the end of the most recent fiscal year of the issuer, of the
effectiveness of the internal control structure and procedures of the issuer for financial reporting.
(b) Internal Control Evaluation and Reporting.—With respect to the internal control assessment
required by subsection (a), each registered public accounting firm that prepares or issues the audit
report for the issuer shall attest to, and report on, the assessment made by the management of the
issuer. An attestation made under this subsection shall be made in accordance with standards for
attestation engagements issued or adopted by the Board.
Any such attestation shall not be the subject of a separate engagement.
Chapter 2
Documentation and Working Papers
Internal audit documentation covers the internal audit charter, audit plan, type and extent of audit
procedures performed, timings and the conclusions drawn from the evidence obtained. Proper
documents are the basis for the planning and performing the internal audit. Documents provide the
evidence of the work of the internal auditor. Internal audit documentation should be detailed and
comprehensive to obtain an overall understanding of the audit.
The internal auditor should document the issues that are important in providing evidence and support
his findings or in preparation of the report. In addition, the working papers also help in planning and
carrying out the internal audit, review and control the work and most importantly, provide evidence of
the work performed to support his observations/ findings in the report.
The internal audit documentation should cover all the important aspects of an engagement viz.,
engagement acceptance, engagement planning, risk assessment and assessment of internal controls,
evidence obtained and examination/ evaluation carried out, review of the findings, communication and
reporting and follow up. In case the internal audit is outsourced, the documentation should include a
copy of the internal audit engagement letter, containing the terms and conditions of the appointment.
Internal audit documentation should be designed in accordance with requirement of specific audit and
properly maintained to meet the requirements and circumstances of each audit. All significant issues
which require special attention, together with internal auditor’s observation thereon should be
appropriately included in the internal audit documentation.
Properly designed and maintained internal audit documentation enables the reviewer to understand:
a) the nature and extent of audit procedures performed and applicable legal and regulatory
requirements;
b) timings of the audit
The internal auditor should formulate policies as to the custody and retention of the internal audit
documentation within the framework of the overall policy of the entity in relation to the retention of
documents and in accordance with the practices prevailing in the profession.
Note: For more details, the readers may refer to Cost Audit and Assurance Standard (CAAS 102) on
“Cost Audit Documentation” issued by the Institute of Cost Accountants of India.
Chapter 3
Planning an Internal Audit and Audit Programme
While carrying out the internal audit of an entity, an internal audit plan is required to be formulated.
Internal audit plan is a document which defines the scope, coverage resources and duration of audit
required for an internal audit of an organization over a defined time period. The internal auditor should
formulate the plan in consultation with those charged with governance e.g. board, audit committee or
any other person authorized by the management and develop document for each internal audit
engagement to conduct the audit in an efficient and time bound manner. The formulation of internal
audit plan ensures that proper attention is given to the significant areas of internal audit and
identification of potential problems, use of techniques and available skills judiciously so that the audit
assignment can be completed within stipulated time and as per the terms of engagement.
The internal audit plan should be comprehensive and clearly defined so that the objectives of the
internal audit can be achieved efficiently and effectively. The internal audit plan should be consistent
with the desired goals and objectives of the internal audit function as well as the goals and objectives of
the organization. It should be ensured that the plan is consistent with the terms of the engagement and
should also reflect the risk management strategy of the entity.
The internal audit Planning involves developing a plan for taking action to cover the expected scope and
conduct of audit and developing an audit program consisting the nature, extent of audit procedures and
timing. Audit Planning is a continuous exercise. An audit plan should be continuously reviewed by the
internal auditor to carry out any modifications required to bring the same in line with the changes, if any,
in the scope of audit or change in the audit environment of the organization. However, any major
modification to the internal audit plan should be done only after consideration and in consultation with
the board, audit committee or any other person authorized by the management if so required. Any
modification in the internal audit plan should be documented by the internal auditor, if such
modifications are significant.
The internal audit plan should be drawn keeping in view the size and nature of the business of the entity.
While developing the internal audit plan, the internal auditor should have regard to the objectives of the
internal audit engagement as well as the resources and time, keeping in view the size of the entity.
i. Provide information about the legal and regulatory framework within which the entity operates.
ii. Provide information about of the entity’s accounting and internal control systems and policies.
iii. Assessment of the effectiveness of the internal control procedures in practice in the entity.
Guidance Note on Internal Audit of Telecommunication Industry Page 15
The Institute of Cost Accountants of India
iv. Documentation of the scope, extent of procedures to be performed and timeline for completion
of assignment.
v. Assessment about the activities requiring special focus on the critical activities as well as on
their materiality and their effect on operations of the organization.
vi. Identifying staff which is most suitable for the assignment undertaken.
vii. Provide information about the identification of persons assigned with reporting responsibilities.
The internal audit plan should also envisage about the benchmarks against which the actual results of
the activities can be measured, the time spent, the actual cost incurred on completion of the
assignment. The form and content of the audit plan and the extent of its details would depend on the
nature, business environment and size of organization however, the internal audit program should be so
designed that it facilitates in achieving the desired objectives of the engagement.
The internal auditor should prepare a formal internal audit program listing the procedures essential for
achieving the objective of the internal audit plan and ensure that the internal audit is carried out in
accordance with the standards of Internal Audit.
Note: For more details, the readers may refer to Cost Audit and Assurance Standard (CAAS 101) on
“Planning an Audit of Cost Statements” issued by the Institute of Cost Accountants of India.
Chapter 4
Audit Sampling
In the modern business environment, the internal audit is critical and complicated process as large number of
transactions are carried out by the business entities which makes the task of internal audit difficult and time
consuming so the internal auditors have to be cautious and careful because there is a time limit for
completing the audit assignments as well as they have to take care about quality audit besides proving their
professional efficiency to handle effectively the internal audit assignment of big business entity.
In modern age, the auditors seldom perform audit checks on all items of an account or transactions for the
purpose of assessment of the population (an account balance or transactions). Consequently, the evidential
matter obtained for an account balance or transactions is based upon the reasoning that the characteristics
found in a representative sample of a population (an account balance or transactions) are reasonably true
representation of characteristics to be found in the population from which such sample is taken.
Audit sampling means the application of audit procedures to less than 100% (all) of the items in class of
transactions to enable the internal auditor to obtain and evaluate audit evidence about some characteristic of
the items selected in order to form a conclusion concerning the population.
When designing an audit sample, the internal auditor should consider the following:
(i) the specific audit objectives,
(ii) time limit of audit
(iii) the population from which the internal auditor takes sample,
(iv) the sample size and,
(v) use of sampling technique (statistical vs. non statistical sampling).
Therefore, while deciding about picking an audit sample, the internal auditor has to ensure that testing the
sample will provide appropriate audit evidence. Therefore when determining the sample size, the internal
auditor should consider sampling risk, the tolerable error, and the expected error. The internal auditor should
select sample items in such a way that the sample can be expected to be fair representative of the population
by ensuring that all items or sampling units in the population have an opportunity of being selected.
Despite sampling being unavoidable in most of the audits, it is one area which is a challenge for the auditors
and many auditors struggle with as choosing the most appropriate sampling method, picking the appropriate
and adequate audit sample, testing the sample and then evaluating the results of the audit sample to ensure
that it yields the desired results.
The internal auditor should evaluate the sample results to determine whether the assessment of the relevant
characteristics of the population is confirmed or whether it needs to be revised.
Chapter 5
Audit Evidence
While compiling suitable and adequate evidence, the internal auditor should assess whether he has
obtained adequate and appropriate audit evidence to draw his conclusions or form an opinion or have a
basis of his findings in accordance with the terms of the engagement.
During the internal audit of an entity / department/ function/ activity, the internal auditor draws
conclusions or form an opinion with regard to the key issues and areas of concern, significant control
lapses, weaknesses / failures in the system or procedures, the internal auditor shall make modifications
in the existing in the system or procedures or apply additional audit procedures which in his opinion are
necessary to resolve the issue. The internal auditor generally assesses whether the internal audit
evidence obtained from one source is inconsistent with that obtained from another. Where the internal
auditor has doubts over the reliability of information to be used as internal audit evidence, he should
take utmost care that his conclusion or opinion is based on consistent evidence.
The internal auditor can obtain evidence by performing the following procedures:
a. Inspection and verification of information / data / record
b. Observation
c. Inquiry and confirmation
d. Assessment, findings and computation
e. Analysis and conclusion
During the course of internal audit, the internal auditor should have / collect all the evidence that he
considers necessary for the expression of his opinion. Professional skill and judgment is also required to
determine the nature and amount of audit evidence required to draw his conclusions or form an opinion
or have a basis of his findings. In this regard, the internal auditor should consider:
i. Issue or activity, subject to audit;
ii. materiality / impact of possible lapses/ errors / frauds;
iii. degree of risk of lapses/ errors / frauds;
iv. probability of the error occurring;
v. reliability; and
vi. appropriateness and support to draw conclusion or to form an opinion or have a basis of
findings
Thus while preparing the report, the internal auditor should have suitable and relevant working papers
as audit evidence to enable him to draw reasonable conclusions based on such documentary evidences.
Chapter 6
Analytical Procedures
Analytical procedures help in an efficient and effective assessment of information collected during the
course of internal audit. The internal auditor should ascertain that analytical procedures developed by
him should be applied during the course of internal audit of an organization are effective and yielding
the expected results. The application of analytical procedures is an instrument for risk assessment
procedures at the planning and overall review stages of the internal audit.
Certain analytical techniques need to be developed for execution of internal audit processes. Analytical
procedures means the analysis of significant ratios and trends, including the resulting investigation of
fluctuations and relationships in both financial and non-financial data that are inconsistent with other
relevant information or which deviate significantly from predicted amounts. The application of analytical
procedures in the internal audit help the internal auditor to arrive at the conclusion as to whether the
systems, processes and controls are robust, operating effectively and are consistent with the
expectation of internal auditor about the result of the business.
The analytical procedures are useful tool to identify significant deviations or the irregularities or the
inconsistencies with other relevant information, the internal auditor should investigate and obtain
adequate explanations and appropriate corroborative evidence. The examination and evaluation can
include inquiries from management and the application of other auditing procedures until the internal
auditor is satisfied that the results or relationships are sufficiently explained. Unexplained results or
relationships could be indicative of a precarious condition such as a potential error, irregularity, or illegal
act. Results or relationships that have not been sufficiently explained should be communicated to the
appropriate levels of management. Thus based on the outcome of the analytical procedure the internal
auditor based on analytical procedures can recommend appropriate courses of action, depending on the
circumstances to the management of the company.
Chapter 7
Accounting System and Internal Control
Introduction
While the management is responsible for establishment and maintenance of appropriate internal
control and risk management systems, the role of the internal auditor is to suggest improvements to
those systems. For this purpose, the internal auditor should:
(i) Obtain an understanding of the risk management and internal control framework established
and implemented by the management.
(ii) Perform steps for assessing the adequacy of the framework developed in relation to the
organizational set up and structure.
(iii) Review the adequacy of the framework.
(iv) Perform risk-based audits on the basis of risk assessment process.
Internal auditor may, however, also undertake work involving identification of risks as well as
recommend design of controls or gaps in existing controls to address those risks.
In addition, the internal controls must also satisfy the three basic criteria:
(i) they must be appropriate, i.e., the right control in the right place and commensurate to the risk
involved;
(ii) they must function consistently as planned throughout the period, i.e., be complied with
carefully
(iii) by all employees involved and not by-passed when key personnel are away or the workload is
heavy; and
(iv) They must be cost effective, i.e., the cost of implementing the control should not exceed the
benefits derived.
The internal control system should focus on both accounting and non-accounting operations and
functions.
Strong accounting controls result in correct, reliable, timely and relevant reporting of financial
transactions that have already occurred while strong controls in operational areas improve the overall
performance of the enterprise.
The internal auditor should review whether the internal controls are cost effective. Evaluation of cost
effectiveness should take into consideration both direct and indirect costs. Review of internal controls
may include interviews with personnel at various organizational levels, transaction walkthroughs, review
and analysis of documented policies and procedures and mapping the process to determine and rectify
existing control gaps and to suggest process improvement. The internal auditor should determine if the
controls were in use throughout the period of intended reliance or have there any substantial
alterations in the same during the stated period. Different techniques may be used to record
information. Selection of a particular technique depends on the auditor’s judgment.
The recently released Auditing Standard No. 5 of the Public Company Accounting Oversight Board
(PCAOB), which superseded Auditing Standard No 2, has the following key requirement for the external
auditor:
(i) Assess both the design and operating effectiveness of selected internal controls related to
significant accounts and relevant assertions, in the context of material misstatement risks;
(ii) Understand the flow of transactions, including IT aspects, sufficiently to identify points at which
a misstatement could arise;
(iii) Evaluate company-level (entity-level) controls, which correspond to the components of the
COSO framework;
(iv) Perform a fraud risk assessment;
(v) Evaluate controls designed to prevent or detect fraud, including management override of
controls; Evaluate controls over the period-end financial reporting process;
(vi) Scale the assessment based on the size and complexity of the company;
(vii) Rely on management's work based on factors such as competency, objectivity, and risk;
(viii) Evaluate controls over the safeguarding of assets; and
(ix) Conclude on the adequacy of internal control over financial reporting.
Chapter 8
Internal Control & Risk Assessment
Internal Control
The Internal auditor is required to examine the continued effectiveness of the internal control system
through evaluation and then make recommendations, if any, for improving that effectiveness. Internal
auditors should systematically evaluate the nature of operations and system of internal controls in the
entity being audited to determine the nature, extent and timing of audit procedures. Internal controls of
an organization comprise process and methods adopted to safeguard assets, comply with laws,
regulations and encourage adherence to management policies, ensure the completeness and
correctness of data and promote efficiency. The internal auditor is required to have focus on improving
the internal control structure and make continued efforts for promoting better corporate governance in
the entity. The internal auditor should cover following aspects while evaluating and making
recommendation on the internal control system of an organization:
Evaluation of the efficiency and effectiveness of controls.
Recommending new controls where needed – or discontinuing / disbanding unnecessary
controls.
Using control frameworks.
Developing control self-assessment / evaluation
There is always need for an understanding of the significant processes and internal control systems
which are sufficient to plan the internal audit engagement and develop an effective audit approach. The
internal auditor can use his professional acumen and judgment to assess and evaluate the efficacy of the
internal control operating of the entity. The auditor can have information about the control environment
to satisfy in assessing management's attitudes, awareness and actions relating to internal controls and
their significance in the entity and can also have an understanding of the internal control procedures
adequate to develop the audit plan for the entity.
Following facts are required to be taken into consideration while evaluating of internal control system in
an organization:
a) Information about the entity’s mission statement and written goals and objectives.
b) Assessment of risks at the entity level.
c) Assessment of risks at the function or activity level.
d) Prepare a Business Controls worksheet for each significant activity in each function or
department of the entity with documentation of the associated controls procedures and their
degree of adequacy, give special attention for those activities which are most significant to the
success of the activity, function or department.
e) Study of business controls worksheet to assess the risks, for which no controls exist or the
existing controls are inadequate.
f) Ensure that predictable risks identified at the function or department or entity level are
addressed in the Business Controls worksheet and operating controls documents.
The internal control weaknesses should be identified which have not been corrected and necessary steps
required for correcting those weaknesses. The internal auditor should document the rationale in
deciding which audit recommendations should be followed up on and when, in contrast with
recommendations where no follow-up is needed. In the situation where recommendations have been
effectively implemented or that senior management has accepted the risk of not implementing the
recommendations, the internal auditor should document the matter and appropriately report its impact
on the internal audit process.
Risk assessment:
Risk is an event which can prevent, hinder and fail to further or otherwise obstruct the entity in
achieving its objectives. Risk can be classified as Strategic, Operational, Financial and leakage of vital/
confidential information. Management is responsible for establishing and operating the risk
management framework in the organization.
Enterprise Risk Management is a process that consists of risk identification, prioritization and reporting,
risk mitigation, risk monitoring and assurance. The corporate risk function establishes the policies and
procedures, and the assurance mechanism that can be accomplished by internal audit. The role of
internal auditor is to provide assurance to management on the effectiveness of risk management. While
assessing the effectiveness of the enterprise risk management following are required to be examined:
i. assessment of the risk both at the entity level as well as the function level;
ii. assessment of compliance with the risk management policy and framework;
iii. assessment of adequacy of internal audit plan;
iv. assessment of the efficiency and effectiveness of the risk response.
Enterprise Risk Management is a planned, consistent and perpetual process of evaluating or assessing
risk and developing strategies to manage risk within manageable limit. It involves identification,
assessment, mitigation, planning and implementation of risk and developing an appropriate risk
response policy.
The internal auditor should only assess and identify the risks and not manage any of the risks or take risk
management decisions on behalf of the management as the accountability for risk management
decisions of the management and should not be taken by the internal auditor. Internal auditor’s role is
only to comment and advise on risk management and assist / guide management to mitigate the
risks.
The internal auditor should normally perform an annual risk assessment of the entity, to develop a plan
of audit engagements for the forthcoming period if the circumstance so require. The plan needs to be
reviewed at various frequencies carried out. This involves review of the various risk assessments
performed by the entity (e.g., strategic plans, competitive benchmarking, etc.), consideration of prior
audits, and interviews of divisional and operational heads who are part of the senior management. It is
designed for identifying key areas of internal audit and managing risks directly for the enterprise. The
risk assessment process should be of a continuous nature so as to identify not only residual or existing
risks, but also emerging risks. The risk assessment should be conducted formally at least annually but in
complex enterprises it can be conducted more frequently depending upon the gravity of situation.
The internal auditor should properly understand and study the Enterprise Risk Management to give
assurance to management on the efficacy of risk management in the entity. The internal auditor should
ascertain that risks are appropriately assessed and managed. The internal auditor should keep his
independence and objectivity while assuring the management of the entity about the effectiveness of
the Enterprise Risk Management. The internal auditor as a result of the review, Tests conducted, Samples
covered and Observations and recommendations, delineating the following information Assurance rating
(segregated into High, Medium or Low) can submit his report to the Board or its relevant Committee or
some other authorized person in this behalf by the entity.
Chapter 9
Internal Audit in IT Environment- Requirement for Successful System Audit
However excessive reliance on the use of information technology without taking proper safety/
protection can land up an entity in loss if data, systems failure or hacking of system/ data and
compliance with the cyber laws of the land etc. Entity-level control procedures for information
technology are the foundation for internal control, providing discipline and structure to the organization.
The information technology controls have a pervasive effect on the reliability, integrity and availability of
processing and keeping entire data secured. The internal auditor should properly assess the effect of an
IT environment on the internal audit engagement. The internal auditor should understand and analyse
the use of information technology environment to record, compile, process and analyse information; and
assess the effectiveness of the system of internal control in existence in the entity relating to:
(i) Input of authorised, correct and entire data to the processing centre;
(ii) Reliability and authenticity of software ( not pirated software) used in processing, analysis
and reporting of data;
(iii) Verifiability/ audit trail of computer-based accounting reports.
Business process controls provide structure to generate revenue, costs and other financial records and
ultimately report on the financials of the organization. These documented templates or flow charts are
helpful to the internal auditor to be acquainted with the existence of information technology system
controls their design and the related test procedures and management action plan for thwarting
weaknesses and deficiencies.
While evaluating the reliability of the internal control systems in IT environment, the internal auditor
should ascertain the following:
I. ensure that authorised, relevant, accurate and entire data is processed,
II. ensure the accuracy, reliability and completeness of output,
III. provide for timely detection and rectification of errors,
IV. generate alert signal for unauthorized amendments to the programs/ software,
V. ensure safe custody of source code of application software and data files,
VI. provide for proper backup of data/ information in case of interruption in the system due to
power, mechanical or processing failures or restart of the system,
VII. ensure adequate security measures to protect data against fire and other calamities, frauds, risk
of hacking etc.
The internal auditor should assess the effectiveness and safety of the information technology resources,
including – manpower, applications, facilities and data and review that the information technology
system in the entity considers the confidentiality, effectiveness, integrity, availability, compliance and
validity of data and information processed and handling of processed data/ output.
The internal auditor should have professional knowledge/ expertise of the information technology
systems such as the operating knowledge of a specialized ERP / SAP system or other similar accounting
system etc to plan, direct, supervise, control and review the work performed through IT system. When
the information technology systems are significant, the internal auditor should also obtain an
understanding of the IT environment. In case the internal auditor is not professionally equipped to
handle the information technology system of the entity he should seek the assistance of a technical
expert possessing professional skills in the field of system audit, who can be either on the roll of the
internal auditor or act as consultant / system expert.
While designing audit procedures to review the systems, processes, controls and risk management
framework of the entity, the internal auditor should understand properly the IT environment of the
entity with the help of checklist and questionnaire.
In case the internal auditor finds during the course of audit that the information technology systems or
data processing of the entity or a particular operation has been outsourced to an outside party, the
internal auditor should give due consideration to the risks associated with such outsourced services and
has to review the outsourced IT control processes with regard to the processing of data, security of data
and report generated. The internal auditor should ensure as to what extent to the entity’s controls
provide reasonable assurance with regard to the completeness, validity, reliability and verifiability of
the data and information processed by such outsourced agency.
c) legal and regulatory compliance assurance, including legislature readiness assessment and
ongoing testing, such as Companies Act and SEBI Act and its Directives etc that have bearing on
the operations of the organization ;
d) development of awareness of risk and control across the entity;
e) ability to respond to urgent matters.
The use of system in the internal audit is most desired in the present scenario. An internal audit shall be
more successful and effective if aforementioned key activities are automated using software to make
them effective for different audits. The experts have identified the following core requirements of a
software solution for a closed-loop internal audit program for end-to-end process, audit management
through corrective actions and change control.
Audit Management: The software should cover definition and management of various elements of the
audit process such as creation of different checklists, tracking audit schedule details, managing role
differentiation between audit in-charge, approvers and managers for all audit matters and enabling
proper distribution of workload by sharing audit matters. The software should support auditors to track
progress/ audit schedule details, identify and append various documentary evidence as supporting proof
of the non-conformities, review non-conformities highlighted by the internal audit team, ensure all exit
criteria when all the items specified in the checklist have been achieved before the step is completed
and report audit results.
Identification of Non-Conformance and Its Handling: The software should track and identify all non-
conformances noticed during the audit process and provide ability to either to report the non-
conformance and its gravity or suggest a corrective action process.
Corrective Action: The internal audit software should provide a mechanism for automatically routing a
corrective action request to the authorized users with built-in MIS reporting and escalation procedures
for unresolved issues, review all relevant non-conformance records to analyze the root cause and
document corrective actions to rectify the problem or prevent its recurrence. The system should
support configurable industry-specific report formats which are widely used by the consultants.
Change Control: The software should support multiple change control mechanisms required for
corrective action such as document change, process instructions change or change to a standard
operating procedure etc.
The system should be developed to cover all important aspects of audit using web architecture and it
can be easily accessed by any user. The system should be such that it can be easily integrated with other
systems or corporate portals. The system should report on any non-conformance and corrective action
at a function /department/ activity /plant/division level and provide display on dashboard of the
monitor the report on key process indicators of the internal audit activities.
Guidance Note on Internal Audit of Telecommunication Industry Page 30
The Institute of Cost Accountants of India
Chapter 10
Audit Report- Relevance of External Opinion and Reference
The internal auditor may not be expert in all the areas of operations of an entity and may require assistance /
guidance from an expert/ consultant. In order to effectively discharge of his duties as internal auditor, the
internal auditor has right to obtain technical advice and assistance from competent experts if the internal
audit team does not possess the necessary knowledge, skills, expertise or experience needed to perform all or
part of the internal audit engagement.
In the event the internal auditor decides to use the opinion of an expert, he should satisfy himself about the
competence, objectivity and the independence of such expert and consider the impact of such assistance or
advice on the overall result of the internal audit engagement, especially in the cases where the outside
expert is engaged by the senior management of the entity. While determining the use of opinion of an expert
or not, the internal auditor should consider:
i. the materiality of the item being examined by the expert.
ii. the nature and complexity of the item including the risk of error therein.
iii. the other internal audit evidence available to support/ oppose the opinion of the expert.
The internal auditor should satisfy himself as to the skills and competence of the expert with regard to:
a. the professional qualifications or membership of the expert in a professional body.
b. the reputation of the expert in the relevant discipline.
c. the knowledge and specific experience of the expert in the industry in which the entity operates.
The internal auditor should take all care to ensure himself that the work of the expert constitutes appropriate
evidence in support of the overall conclusions formed during the internal audit engagement with regard to:
I. the consistency and appropriateness of use of source data supplied by the expert.
II. the assumptions and methods used, if appropriate, and their consistency with the previous period.
III. the results of the expert's opinion in the light of the internal auditor's overall knowledge of the
business and of the results of his audit procedures
The internal auditor should not, normally, refer to the work of an expert in the internal audit report. Such
reference can, however, be considered useful, in the report with regard to support for material weaknesses
or deficiencies in the internal control system or in such other cases where the internal auditor observes that
such a reference would benefit the readers of the report. While referring to the work of the expert, the
internal auditor should outline the assumptions, broad methodology and opinions of the expert and when the
internal auditor thinks it appropriate to disclose the identity of the expert, he should obtain prior written
consent of the expert for such disclosure if such consent has not already been obtained.
Chapter 11
Audit Conclusion and Corrective Measures
The Observations paragraph should clearly mention the process name, significant observations, findings,
analysis and comments of the internal auditor on the issues which were identified during the course of
internal audit process and have bearing on the performance of the entity.
After the conclusion of the audit, the internal auditor, after discussion with the auditee, make
observations, highlights findings on various points / issues examined during the course of internal audit
of the entity which are not in accordance with the policies and procedures of the entity or the employee
of the organization contravening the generally accepted business practices of the entity. Even some
times cases of fraud, misappropriation etc are also detected during the course of internal audit of the
entity that need to be reported to the management of the entity.
On the findings, observation or comments of internal audits of an entity in some cases, there may be
need for corrective action on the part of the management (auditee). Accordingly, the Action Taken
Report paragraph should be appended after the observations and findings and should include:
i. Status of compliance/ corrective action taken/ being taken by the entity with respect to
previous internal audit observations or current internal audit observations;
ii. Status of compliance/ corrective action not taken by the entity with respect to previous internal
audit observations or current internal audit observations and the reasons for non-compliance
thereof; and
iii. Revised timelines for compliance of all items in (ii) where no corrective actions have been taken
till the date of the report.
The internal auditor’s report, in the Summary paragraph, should clearly point out the internal audit
findings, key issues and observations of concern, significant controls lapses, failures or weaknesses in the
systems or processes, nonconformities, deviation from laid policies and procedures etc which have
bearing on the financial or non-financial areas of the entity.
Finally, when the internal auditor has highlighted the significant controls lapses, failures or weaknesses in
the systems or processes, nonconformities or deviation from laid policies and procedures and seeks
action taken report on such issues and no suitable action is taken by the management of the entity, such
points become audit conclusions and reported in the final report submitted to the auditee.
Chapter 12
Audit Report and Report Writing
Audit Report
At the end of the audit, an audit report containing a clear written expression of significant observations,
suggestions/recommendations on the vital and critical areas is prepared. Such report should be based on
the policies, processes, risks, controls and transaction processing taken into consideration and
managements’ responses obtained during the course of audit.
The internal auditor should take due professional care and apply professional skills to ensure that the
internal audit report, inter alia, is:
(i) concise and clear
(ii) factual – presents all significant matters with disclosure of material facts
(iii) specific on issues
(iv) unambiguous
(v) submitted as per the schedule
(vi) complies with applicable generally accepted internal audit standards and procedures.
The internal auditor’s report should be appropriately addressed as required by the circumstances of the
engagement. Ordinarily, the internal auditor’s report is addressed to the appointing authority or such
other person as directed in the engagement letter.
Report Writing
At the end of each audit, the auditors issue reports wherein they summarize their findings,
recommendations, any responses or action plans and issues pending unattended by the management.
An audit report should have an executive summary; findings specific issues or related recommendations
or action plans; and appendix details comprising graphs and charts or process information.
The recommendations in an internal audit report are helpful for the organization to exercise effective
and efficient governance, risk and control processes associated with operations objectives, financial and
management reporting, legal/regulatory compliance and compliance of laid policies and procedures.
Audit observations and recommendations should relate to particular statements about transactions,
such as whether the transactions were valid or authorized, properly processed, correctly valued,
processed as per schedule, properly disclosed in financial or operational reporting and carried out as per
the entity’s policies and objectives.
Under the International Internal Auditing (IIA) standards, the preparation of a balanced report is a critical
component of the audit process. The internal audit report provides executives and the board with the
opportunity to assess and evaluate the issues reported in the proper background and as a constructive
approach. The auditors help the entity to achieve its targets and objectives by providing suggestions,
viewpoint, analysis and feasible recommendations for business improvements in vital and critical areas
of operations.
The audit report should contain five elements, sometimes these are called the "5 C's":
1. Condition: Which is the particular problem remains unidentified?
2. Criteria: Which is the standard that was not met? The standard may be a company policy or
other benchmark.
3. Cause: Why did the problem occur?
4. Consequence: What is the risk/negative outcome (or opportunity foregone) because of the
finding?
5. Corrective action: What should management do about the finding? What have they agreed to
do and by when?
The internal auditor reports the observation, suggestions and recommendations on critical issues to the
Board, Audit Committee, and Executive Management or to such other person who is authorized to
receive internal auditor’s report along with management's progress towards resolving them. As certain
most critical issues that have a reasonable likelihood of causing substantial financial loss or reputational
damage to the entity, it is a matter of considerable judgment to select flag issues in the internal audit
report that are critical and need Audit Committee's attention and to emphasize these issues in the
proper context.
Once the critical issues or weak areas are identified during the course of internal audit, the internal
auditor should discuss these issues with the management before incorporating them in the in the report.
Writing about positive observations in audit reports was rarely done however for building better
relationships this should be done. The audit report must also contain acknowledgment for support and
cooperation extended by entity (auditee).
Chapter 13
Audit Follow-up
Consequent upon the completion of the draft audit report is discussed by the internal auditors with the
management of the company which may contain certain points / issues on which follow up action would
be required. The tem follow-up with reference to internal audit has been define by the Institute of
Internal Auditors as: "It is a process by which the internal auditors determine the adequacy,
effectiveness and timeliness of actions taken by management on reported audit findings."
The importance of the audit report can be judged with the quality of findings and recommendations,
reflecting cost conscious, workable and timely solutions, have been achieved to some quantifiable
degree and add value to the organization’s functioning. Unfortunately, this does not happen as often as
it should be in practice. Most organizations would not outsource their audit function if they gained a
thorough understanding of the savings and improvement to operations and processes that the audit can
bring to the organization.
The bottom line is how does audit enhance an organization's value? The answer is follow-up, if an
organization is to understand what value audit can add in improving operational integrity, efficiency and
effectiveness. Therefore the follow up action plays a very important role in improving the efficiency of
the organization. Thus by looking at the prior audit recommendations of earlier work, auditors are able
to assess if the entity, company or corporation has taken any action toward the report
recommendations. If it has, a process is in place to try to assess what impact those recommendations
had and to formally report the assessment and findings. The auditors will receive direct feedback from
managers, supervisors or staff that their actions are the results of an earlier audit report. In some
instances, they may even provide direct information and cost figures on how much is being saved as the
result of new controls in place or improvements to the existing processes.
Where agreed action plans are not completely implemented the auditor asks the following questions:
i. What remains to be done?
ii. By whom and when?
iii. Have alternatives been implemented that may be more appropriate?
iv. Has the agreed action plan ceased to be of value?
v. If no action was taken, why not?
vi. What is the issue or concern causing inaction?
The end result should be a brief summary of the status of every action plan agreed upon. The final
summary is reviewed with the person responsible for clearing the audit report before the follow-up
report is issued the auditee.
Chapter 14
Indian Telecom Sector- An Introduction
An Overview
The telecom sector has been recognized the world-over as an important tool for socio economic
development for a nation and telecom services are crucial to realize the socio-economic objectives of the
country. Telecommunications has evolved as a basic infrastructure like electricity & power,
transportation, roads etc. and has also emerged as one of the critical components of economic
development and growth required for overall socio economic development of the country. The Indian
telecom sector has registered a phenomenal growth during the last decade or so and has become
second largest telephone network in the world, only after China.
The Telecom service sector in India is controlled, regulated and monitored by:
TRAI's mission is to create and nurture conditions for growth of telecommunications in the country in a
manner and at a pace which will enable India to play a leading role in emerging global information
society. One of the main objectives of TRAI is to provide a fair and transparent policy environment which
promotes a level playing field and facilitates fair competition. TRAI issues directions, orders and
regulations to achieve its objectives and carry out its functions assigned under Telecom Regulatory
Authority of India Act, 1997.
Telecom Policies
1. National Telecom Policy (NTP-94)
The first National Telecom Policy (NTP-94) was announced by the Government in 1994 with the
objectives of providing telephone on demand, provision of world class services at reasonable prices and
universal availability of basic telecom services to all villages. NTP-1994 recognized that the required
resources for achieving these targets could not be made available only out of Government sources and
private investment and involvement of the private sector was required to bridge the large resource gap.
Adjusted Gross Revenue (AGR) as annual license fee and spectrum usage charge to the Government. The
percentage of revenue share depended on the licence service area* where they offered their services
under the Licence.
The Union Cabinet based on the recommendations of Group of Ministers (GoM) on Telecom matters,
constituted in September 2003, approved the policy for licensing of Unified Access Services. The GoM
had considered the recommendations submitted by Telecom Regulatory Authority of India (TRAI) on 27
October 2003. The policy drew upon NTP-99. Through this approval, Cabinet besides, a number of other
related decisions, charted the course to a Universal Licensing Regime. Guidelines for issue of licenses
under Unified Access Services (UAS) were issued on 11 November 2003 where after licences were issued
only under UAS.
In April 2007, the DoT sought the opinion of the TRAI on some specific points including that of putting a
cap on the number of access service providers in a service area, as radio frequency spectrum required
for wireless services was not sufficient to meet the increasing demand from UAS Licensees. TRAI
recommended (August 2007) that no cap be placed on the number of access service providers in any
service area. TRAI in August 2007 also recommended that “a licensee using one technology may be
permitted on request, usage of alternative technology and thus allocation of dual spectrum. However,
such a licensee must pay the same amount of fee which has been paid by the existing licensees using the
alternative technology or which would be paid by the new licensee going to use that technology”.
Achieve One Nation - Full Mobile Number Portability and work towards One Nation - Free
Roaming.
Increase rural tele-density from the current level of around 39 to 70 by the year 2017 and 100 by
the year 2020.
To recognize telecom, including broadband connectivity as a basic necessity like education and
health and work towards ‘Right to Broadband’.
Provide affordable and reliable broadband-on-demand by the year 2015 and to achieve 175
million broadband connections by the year 2017 and 600 million by the year 2020 at minimum 2
Mbps download speed and making available higher speeds of at least 100 Mbps on demand.
Provide high speed and high quality broadband access to all village panchayats through a
combination of technologies by the year 2014 and progressively to all villages and habitations by
2020.
Recognize telecom as Infrastructure Sector to realize true potential of ICT for development.
Address the Right of Way (RoW) issues in setting up of telecom infrastructure.
Mandate an ecosystem to ensure setting up of a common platform for interconnection of various
networks for providing non-exclusive and non-discriminatory access.
Enhanced and continued adoption of green policy in telecom and incentivize use of renewable
resources for sustainability.
Achieve substantial transition to new Internet Protocol (IPv 6) in the country in a phased and
time bound manner by 2020 and encourage an ecosystem for provision of a significantly large
bouquet of services on IP platform.
Licensing Requirement
The telecom sector is regulated by the Telecom Regulatory Authority of India (TRAI), which regulates the
telecom sector through licensing requirements. A telecom company can provide only those services and
in such telecom circles (licensed Service areas), for which licences are granted by the Department of
Telecom (DoT), Ministry of Communications and Information Technology (MOC&IT), Government of
India. Any telecom operator intending to enter into telecom business has to r obtain Licence from DoT
and fulfill the various license requirements.
Chapter 15
Transactions Peculiar to Telecom Service Sector
The telecom service sector has witnessed a very fast growth in India in the last decade or so. The horizon
for the range of telecom services has expanded multi-folds. The range of services includes:
Voice services like landline, cellular mobile, satellite and internet based, National Long Distance ,
International Long Distance
Data services like leased lines, Wi-Fi
Video conferencing services
Cable TV, DTH and broadcasting services
Any other telecom service for which TSP has to obtain either licence or seek registration from
DoT
The telecommunications service sector is regulated by TRAI established under the provisions of Telecom
Regulatory Authority of India Act 1997. TRAI regulates licensed telecom service providers who are
providing different licensed telecom services in India.
b) Revenue Streams – The revenue is earned from various service offered by the TSP. These
services could be listed as below:
i. Revenue from voice calls (wireline, wireless (mobile, WLL etc.))
ii. Revenue from data transfer services (use of internet and mail services), leased circuits
iii. Revenue from value added services such as call waiting, call diverting, caller ID, call
forwarding, alarms, SMS services etc.
iv. Revenue from renting of towers and other infrastructure
v. Revenue from roaming facilities provided
vi. Revenue from any other telecom services not covered above
c) Infrastructure sharing – The telecom sector companies earn revenue through the sharing of
infrastructure, dark fibre, access at cable landing station etc with the other service providers.
The assets that are commonly shared are the networks (used across different circles for roaming
services), the tower facilities, inter-operator call sharing etc. This arrangement works based on
the agreement between the different operators and poses some challenges in terms of revenue
and cost recognition, risks of abuse and fraud.
The internal auditor should understand the specific telecommunication services provided by the client
organisation, applicable licence agreements and also grasp the meaning of some technical terms used in
the industry. For the benefit of the reader some of these terms are given below:
Adjusted Gross Revenue (AGR) is the revenue from telecom services adjusted for deductions
allowed in the respective telecom license. AGR is used as a base figure to determine Licensor’s
share in organization’s revenue, in the form of license fee and spectrum usage charges.
Base Transmission Station (BTS) is the centre that encodes, encrypts, multiplexes, modulates and
feeds the RF (Radio Frequency) signals.
Intelligent Network (IN) for processing call controls via distributed network transfer points.
Home Location Register (HLR) and Visitor Location Register (VLR)
Integrated Service Digital Network (ISDN) allowing both voice and data transmittals
simultaneously across the world using end-to-end digital connectivity.
Mediation is a network device that facilitates the receipt & processing of signals, reformatting in
to other formats to be sent for the purpose of billing & reporting.
Virtual Private Network (VPN) works to secure private communication paths facilitating the data
transfer safely.
Call flow Process includes the setups for outgoing calls and incoming calls.
Call Data records (CDRs)
Billing, SMS, MMS server etc.
The understanding of the above would help the internal auditor to carry the audit of transactions of the
telecom company. Given below is the checklist of special transactions to be taken care while conducting
the audit:
Compliance with Regulatory Requirements
Licensing requirements covering the capital norms, net worth norms and foreign participation
norms
License period, licensed services and licensed circles
Fees payable include the following:
Entry fee – a onetime fee
License fee – it’s the revenue share payable quarterly at the applicable rate on the AGR
as explained above
Radio spectrum usage charges (SUC) for allotment of the frequencies for the GSM and
CDMA
Grounds for charging interest and levy penalty on the late payment of the above fees
Performance Bank Guarantee (PBG) and Financial Bank Guarantee (FBG) to be given to
the Licensor (DoT) to fulfill the Terms & Conditions of Licence Agreement.
Reporting compliances:
Quarterly revenue statements, computation & payment of license fee and other levies
as per the licence agreement.
Operator wise statement of interconnection usage charge payments.
Annual reconciliation of gross revenue, adjusted gross revenue with the audited annual
accounts of the telecom company.
Compliance with the TRAI guidelines on the subscriber verification is mandatory, hence the
internal control assessment becomes very crucial
Penalty payable if the conditions for routing the calls through dedicated trunks for local calls,
NLD and ILD calls are not complied with, hence the internal auditor should verify the
interconnect bill or any notice received from other telecom company to verify if penalty applies
Another important reporting compliance is the report to be submitted as per the ASR 2012.
These reports are Service segment report where the classification is based on types of licence,
geographical area, service / product, network elements etc.
One of the very crucial factors involving the threat of operating loss is revenue leakage. The leakage
could be owing to many reasons such as:
Prepaid Call Data Records (CDRs) may get configured as postpaid CDR and call balance may not
get reduced for the prepaid subscriber and the call is also not billed in case of a postpaid
subscriber
Prepaid calls may not be charged on ‘real time’ basis
Technical faults may not generate the CDR
Wrong tariff plan configurations for prepaid and post paid customers
The internal auditor should verify the revenue assurance process employed by the company and the
effectiveness thereof by looking at variations from the standards, if any. The report that they could refer
Guidance Note on Internal Audit of Telecommunication Industry Page 45
The Institute of Cost Accountants of India
to is the ‘error CDR report’ generated by the system. It will have to be further analyzed according to the
reasons.
The internal auditor should refer to the accounting separation report generated to get a fair idea on the
operating efficiencies of the different services offered by the company. The analysis of the following
ratios would assist in assessing the operational weaknesses & strength of the company:
The technical operating performance could be judged by looking at the various parameters
recommended by the TRAI. Some of the useful indicators would indicate the wastages and efficiencies as
follows. The areas that cover various performance parameters are listed below:
Network related parameters – network availability, accessibility, retention ability, point of
interconnection congestion,
Customer service quality parameters – metering & billing, response time, termination of service,
service activation time, service restoration time.
The internal auditor should assess the internal control system with regard to the above areas and obtain
the data on the various parameters to draw conclusions by observing trend and then benchmarking with
the industry averages. The benchmarking data can be easily obtained through the TRAI annual report on
the performance indicators.
Reliability of total metering and billing performance to be within the prescribed tolerance,
Compliance report to be submitted by 30th June every year with TRAI
The internal auditor should verify whether the audit has been carried out by notified auditor for
metering and billing audit.
Assessment of Frauds
The internal auditor should study the risks regarding possibility of fraud. These frauds could be
categorized as:
a. External frauds – connected with subscription through false documentation and intentional
defaults in the bill payments. The internal auditor should check the internal controls to check
existing defaulters not re-enter the system, evaluation of the credit rating & assigning credit
limit, monitoring of high usage, monitoring of calling pattern and also calls.
b. Frauds through illegal telephone exchanges through the use of VoIP and PSTNs resulting into
routing the international calls as local call causing huge revenue loss in the form of
interconnection usage charges. The internal auditor should assess the internal control system to
identify the possibility
c. Frauds by cloning of handsets and SIMs
d. Credit facilities frauds
e. Internal frauds by the dealers, wrong configuration in the operating systems
Revenue Recognition
The revenue will be basically be from the call charges, national & international roaming, value added
services, registration, processing & activation charges, infrastructure sharing charges for passive links &
active links, interconnection usage charges such as access deficit, carriage and call termination, sale of
recharge coupons, special tariff vouchers etc.
The internal auditor should understand the process of how these revenues are generated, the relevant
agreements entered and the basis for recognizing the revenue.
Postpaid service revenue is recognized according to the various services e.g. the fixed charge is
recognized based on the billing month, the call charges, SMS charges & value added services are
recognized based on the actual amount utilized & billed.
The prepaid revenue is recognized only on the activation of the SIM in the initial stage and then on
the activation of the recharge voucher. The recharge voucher amount should be split between the
administration charges, service tax and the talk time.
The internal auditor should verify the process of the billing and review the IT system to obtain the
input data for billing and recognizing the revenue.
Robust system for regular assessment of control environment for assets managed by third
parties. Existence of robust plan in place to verify, track and manage transition to next generation
networks.
Chapter 16
Telecom Services Licensed by the Department of Telecommunications (DoT) and
Revenue Share Levies
Department of Telecommunications (DoT) deals with Policy, Licensing and Coordination matters relating
to telephones, wireless, data, facsimile and telemetric services and other like forms of communications.
Licensing is done by DoT for: -
1. Access services
2. Carrier services
3. Data services
4. Other services
1. Access Services:
Basic/ Cellular Mobile Telephone Service (CMTS)/ Unified Access Services (UAS)
LICENSEE’s Network in real time only. SERVICE does not cover broadcasting of any messages voice or
non-voice. However, Cell Broadcast is permitted only to the subscribers of the service. The subscriber (all
types, pre-paid as well as post-paid) has to be registered and authenticated at the network point of
registration and approved numbering plan shall be applicable. Unified Access Services Provider (UASP)
means a service provider (Licensee) authorized to provide Unified Access Services under a Licence in a
specified service area by Department of Telecommunications (DoT).
The DoT under the Ministry of Communications and Information Technology is empowered to give
licences for telecom services in India under the provisions of Indian Telegraph Act, 1885 and Indian
Wireless Telegraphy Act, 1933 and authorized to charge licence fee and spectrum usage charges. As per
DOT’s orders, the licence fee payable by various categories of licences for the year 2013-14 and onwards
is summarized in Annexure-A.
The present spectrum usage charges as notified by the Licensor vide notification dated 5th February
2015, is mentioned below:
For spectrum acquired through auction during March 2015 in 800 MHz, 900 MHz, 1800 MHz and
2100 MHz, SUC shall be charged at 5% of the AGR.
In cases of combination of existing spectrum in 800 MHz, 900 MHz, 1800 MHz and 2100 MHz
bands and spectrum acquired through the auction, the weighted average shall be calculated as
equal to (a) sum of spectrum held prior to auction held during March 2015 multiplied by
applicable rate as per orders dated 25.2.2010, 31.10.2014 and SUC rates as per Notice Inviting
Application (NIA) dated 25.2.2010 and (b) spectrum acquired through auction held during March
2015 multiplied by five and then the sum of (a) and (b) divided by total spectrum holding.
The licensees, who have not acquired spectrum through auction held during February
2014/March 2015, shall continue to pay SUC at the applicable slab rate as per the order dated
25.2.2010.
Schedule A: Charges for GSM operators Schedule B: Charges for CDMA operators
(Applicable for 1800MHz, 900MHz Bands) (Applicable for 800MHz Band)
2. Carrier Services:
(i) National Long Distance (NLD) Service
“National Long Distance (NLD) Service” refers to the carriage of switched bearer telecommunication
service over long distance network i.e., a network connecting different Short Distance Charging Areas
(SDCAs). “National Long Distance Service Provider” (NLDO)is the telecom operator providing the
required digital capacity to carry long distance telecommunication service within the scope of LICENCE
for National Long Distance Service, which may include various types of tele-services defined by the
International Telecommunication Union ( ITU), such as voice, data, fax, text, video and multi-media etc.
The company is required to pay a processing fee along with the application of Rs. 15,000/. The company
is required to pay one-time non-refundable Entry Fee of Rs 2.5 crores before the signing of the Licence.
In addition to entry fee described above, the uniform annual licence fee @ 8% of the Adjusted Gross
Revenue (AGR) shall be levied on NLD service for the year 2013-14 and onwards.
International connectivity to the Network operated by foreign carriers. The ILD service provider is
permitted full flexibility to offer all types of bearer services from an integrated platform. The ILD service
providers will provide bearer services so that end-to-end tele-services such as voice, data, fax, video and
multi-media etc. can be provided by Access Providers to the customers. Except GMPCS including through
INMARSAT the ILD service providers are permitted to offer international bandwidth on lease to other
operators. ILD service provider shall not access the subscribers directly (except for Leased Circuits/CUG)
which should be through NLD service provider or Access Provider. However, the ILD service provider may
access the subscribers directly only for provision of International Long Distance voice service through
Calling Cards only. The ILD Service Provider is permitted to provide international bandwidth on lease to
Resellers who are issued license for ‘Resale of IPLC’ under Section 4 of Indian Telegraph Act, 1885.
The company is required to pay a processing fee along with the application of Rs. 50,000/-. The company
is required to pay onetime non-refundable Entry Fee of Rs 2.5 crores before the signing of the Licence. In
addition to entry fee described above the uniform annual licence fee @ 8% of the Adjusted Gross
Revenue (AGR) shall be levied on ILD service for the year 2013-14.
3. Data Services:
Internet Service
“Internet Service” means all type of internet access or internet content services as provided in the
Internet Service provider (ISP) Licence.
The uniform annual licence fee @ 8% of the Adjusted Gross Revenue (AGR) shall be adopted by all ISP
and ISP-IT for the year 2013-14. Initially the validity period of ISP Licence was 15 years and entry fee was
20 lakh and 10 lakh for category 'A' & 'B' respectively but the guidelines dated 24.08.2007 have been
amended w.e.f. 25.01.10 and validity period of new ISP licence (granted subsequent to 25.01.10) is 20
years with revised entry fee of Rs. 30 Lakh and 15 Lakh for category 'A' & 'B' respectively.
Subsequent to ISP Guidelines dated 24.08.07, the applicant company (Licensee) is required to pay Rs.
15,000/- as processing fee along with the application for obtaining ISP Licence. Licensee having Net
worth of Rs. 100 crore is eligible to take permission to provide Internet Protocol Television (IPTV) service.
licenses: (i) Commercial CUG VSAT license and (ii) Captive CUG VSAT license. The commercial VSAT
service provider can offer the service on commercial basis to the subscribers by setting up a number of
Closed User Groups (CUGs) whereas in the captive VSAT service only one CUG can be set up for the
captive use of the licensee.
A uniform annual licence fee rate of 8% of AGR shall be levied for all Commercial VSAT and MSS-R
licences for the year 2013-14.
There shall be no entry fee. All PMRTS licensees including those using Captive Mobile Radio Trunked
Service shall pay licence fee except for agencies working for public service such as Police, Fire and
Government Security etc.
The uniform annual licence fee @ 8% of the Adjusted Gross Revenue (AGR) shall be levied on PMRTS
service for the year 2013-14. There shall be separate charges (Royalty and Licence fee) for use of Radio
Spectrum for commercial as well as captive system shall continue. This will be subject to changes made
by Wireless & Planning Cell (WPC) of DOT from time to time.
The applicant company is required to pay Rs. 10,000/- as processing fee along with the application.
Infrastructure Providers Category-I is exempted from payment of entry fee as well as licence fee to the
Licensor (DOT).
Chapter 17
Reckoning of Revenue for Revenue Share based Levies - Telecom Service Sector
Under section 4 of the Indian Telegraph Act 1885, the Central Government has exclusive privilege of
‘establishing, maintaining and working of telecommunication’ and under the proviso of said section the
Government has the right to transfer its privilege by way of Licence to any person on such conditions and
for consideration of such payments, as it thinks fit. The source of power for granting Licence to provide
telecom services and collecting licence fee is derived under the proviso to section 4 of the Indian
Telegraph Act 1885. Telecom Licences to service providers are issued under the above provision and the
Government is charging licence fee on the basis of revenue share. A fixed percentage of revenue shares
is charged on the Adjusted Gross Revenue (AGR) of a particular type of telecom service for which
Department of Telecommunications (DoT), Ministry of Communications and Information Technology,
Government of India has issued the Licences to the telecom service providers to provide various types of
telecom services in India.
Based on the telecom licence granted for the by DoT, a specified percentage of Adjusted Gross Revenue
(AGR), determined as per the licence agreement, is charged as s licence fee from the telecom service
provider on quarterly basis. The concept of revenue recognition of telecom service provider is based on
the same principle which is applicable to all business entities in the country.
Further, Note 2(A) to General Instructions for the Preparation of Statement of Profit and Loss requires
that in respect of a company other than a finance company, revenue from operations is to be separately
disclosed in the notes, showing revenue from:
As per Note 4 to General Instructions for the Preparation of Statement of Profit and Loss, Other income
should be classified as:
(a) Interest Income (in case of a company other than a finance company);
(b) Dividend Income;
(c) Net gain/loss on sale of investments
(d) Other non-operating income (net of expenses directly attributable to such income).
(iv) The Ministry of Corporate Affairs has notified Ind AS in February 2012 which is converged on the
lines of IFRS. Ind AS 18 –on “Revenue” defines the revenue as under:
“Revenue is the gross inflow of economic benefits during the period arising in the course of the ordinary
activities of an entity when those inflows result in increases in equity, other than increases relating to
contributions from equity participants.
Revenue includes only the gross inflows of economic benefits received and receivable by the entity on its
own account. Amounts collected on behalf of third parties such as sales taxes, goods and services taxes
and value added taxes are not economic benefits which flow to the entity and do not result in increases in
equity. Therefore, they are excluded from revenue. Similarly, in an agency relationship, the gross inflows
of economic benefits include amounts collected on behalf of the principal and which do not result in
increases in equity for the entity. The amounts collected on behalf of the principal are not revenue.
Instead, revenue is the amount of commission”.
(v) The International Accounting Standards Board has issued IAS/IFRS which are globally accepted
standards of accounting. IAS-18 on ‘Revenue’ defines Revenue as:
‘Revenue includes only the gross inflows of economic benefits received and receivable by the entity on its
own account. Amounts collected on behalf of third parties such as sales taxes, goods and services taxes
and value added taxes are not economic benefits which flow to the entity and do not result in increases in
equity. Therefore, they are excluded from revenue. Similarly, in an agency relationship, the gross inflows
of economic benefits include amounts collected on behalf of the principal and which do not result in
increases in equity for the entity. The amounts collected on behalf of the principal are not revenue.
Instead, revenue is the amount of commission”.
Determination of Gross Revenue (GR) and Adjusted Gross Revenue (AGR) in Telecom Sector in
India
The definition of Gross Revenue (GR) and Adjusted Gross Revenue (AGR) adopted in the Licences by the
DoT is broadly the same across all services. The gross revenue is revenue derived from providing licensed
service/ accruing to the licensees, revenue on account of interest, dividend, value added services,
supplementary services, roaming charges, late fees etc. For the purpose of License fee, Gross Revenue is
adjusted for certain pass through items like (i) Public Switched Telecom Network (PSTN) related call
charges actually paid to other service providers within India, (ii) roaming revenue on account of revenue
charges actually passed to other service providers and service tax actually paid to Government to arrive
at AGR.
The components of GR and the list of pass through items being deducted from GR to arrive at AGR for
the purpose of licence fee under the different licence agreement for different kinds of telecom services
are given below:
Licensed Gross Revenue as per license agreement Items to be deducted to calculate
Service Adjusted Gross revenue
Unified The Gross Revenue shall be inclusive of (i) PSTN related Call charges (access
Access installation charges, late fees, sale proceeds charges) actually paid to Bharat
Service of handsets (or any other terminal Sanchar Nigam Ltd. (BSNL) /
Licence equipment etc.), revenue on account of Mahanagar Telephone Nigam Ltd.
(UASL) interest, dividend, value added services, (MTNL) or other telecom service
supplementary services, access or providers within India.
interconnection charges, roaming charges, (ii) Roaming / IUC revenues actually
revenue from permissible sharing of passed on to other telecom service
infrastructure and any other miscellaneous providers, and
revenue, without any set-off for related item (iii) Service Tax on provision of service
of expense, etc. and Sales Tax actually paid to the
Government; if gross revenue had
included the component of Service
Tax.
CMTS The Gross Revenue shall be inclusive of (i) PSTN related Call charges (access
installation charges, late fees, sale proceeds charges) actually paid to Bharat
of handsets (or any other terminal Sanchar Nigam Ltd. (BSNL) /
equipment etc.), revenue on account of Mahanagar Telephone Nigam Ltd.
interest, dividend, value added services, (MTNL) or other telecom service
supplementary services, access or providers within India.
The Gross Revenue shall be inclusive of (i) Charges from pure Internet service,
ISP revenue from Internet access service, activation charges from pure
revenue from internet contents, revenue internet subscribers. Pure Internet
from Internet Telephony service, revenue Services shall mean any method /
from activation charges, revenue from sale, device / technology to provide
lease or renting of bandwidth, links, R&G access to Internet unless explicitly
cases, Turnkey projects etc., revenue from prohibited and all content available
IPTV service, late fees, sale proceeds of including web-hosting, web-
terminal equipments, revenue on account of collocation which is available on
interest, dividend, value added services, internet without access restriction.
supplementary services, interconnection
charges, roaming charges, revenue from
permissible sharing of infrastructure and any
other miscellaneous revenue, without any
set-off for related item of expense etc.
In nutshell, the telecom companies (called Licensees) are required to pay a specified percentage of
Adjusted Gross Revenue (AGR) as licence fee to the DOT (called Licensor) in respect of each licensed
service which is computed as per the format of Adjusted Gross Revenue (AGR) as Licence Fee
prescribed in the Licence Agreement applicable to that particular service.
Guidance Note on Internal Audit of Telecommunication Industry Page 60
The Institute of Cost Accountants of India
A specimen of the format of Adjusted Gross Revenue (AGR) as Licence Fee prescribed in Unified Access
Service Licence (UASL) Agreement is annexed.
ANNEXURE-
Format of Statement of Revenue and Licence Fee prescribed under Unified Access Services Licence
(UASL) Agreement to Determine GR, AGR and Licence Fee from the Revenue records of the Telecom
Service Provider
Statement of Revenue and Licence Fee
Services etc.
(ix) Any other income / miscellaneous
receipt from WLL subscribers.
ii Activation Charges
iii. Airtime Revenue
iv. Pass through charges (provide
operator-wise details)
v. Service Tax
vi. Roaming charges
Vii Service charges
viii. Charges on account of any other
value added services.
Supplementary Services etc.
ix. Any other income/ miscellaneous
receipt from post paid options.
11 Miscellaneous revenue
BB DEDUCT:
1 Charges actually paid to other
SERVICE PROVIDER(s) (OPERATOR-
wise)
2 Roaming revenues actually paid to
other CMSPs And GMPCS service
providers. (operator-wise)
3 Service Tax paid to the Government
4 Sales Tax paid to the Government
BB TOTAL DEDUCTIBLE REVENUE
(1+2+3+4)
We report that:
1. We have obtained all the information and explanations which to the best of our knowledge and
belief were necessary for the purposes of our audit.
2. In our view, the company has an adequate internal control system in relation to revenues which
is commensurate with its size and the nature of its business. The system, in our opinion,
provides reasonable assurance that there is no unrecorded revenue and that all revenue is
recorded in the proper amount and in the proper period.
3. No amounts payable in respect of sales tax, service tax or PSTN/toll/roaming charges were
outstanding at the last day of the quarter(s) for a period of more than two months from the date
they became payable, except for the following:………
4. In our opinion and to the best of our knowledge and belief and according to the explanations
given to us, the Statement has been prepared in accordance with the norms/guidelines
contained in the said Licence agreement in this behalf and gives a true and fair view of the
revenue and Licence fee payable for the period computed on the basis of the aforesaid
guidelines except for the following:
* Strike off wherever not applicable.
(SIGNATURE)
******************************************
Chapter 18
Audit requirements under the Reporting System on
Accounting Separation Regulations, 2012 Issued by TRAI
1. Applicability for Filing of ASR Audit Report
The audited annual accounts of a telecom service provider (TSP) company provides only aggregated
information i.e. information of the company as a whole and does not provide details for regulatory
purpose such as:
(i) Measuring financial performance of products;
(ii) Monitor return on products and services regulated with price ceilings;
(iii) Identify cross subsidizing, Investigating predatory pricing, discrimination and
other anti-competitive conduct;
(iv) Understanding the inter-operator arrangements in terms of price and cost, and
(v) Monitoring segment-wise performance of integrated operators (TSPs)
Therefore Telecom Regulatory Authority of India (TRAI) got notified “Reporting System on Accounting
Separation Regulations, 2012”. These regulations facilitate the availability of more detailed and
disaggregated information on revenues and costs on regular basis. These regulations apply to all service
providers having aggregate turnover of not less than rupees one hundred crore, during the accounting
year for which report is required to be submitted under these regulations, from operations under the
licence issued under section 4 of the Indian Telegraph Act, 1885.
3. Reports
Every service provider shall furnish to the Authority the financial and non-financial reports:
(a) every accounting year based on Historical Cost Accounting for all the services specified in above
table and;
(b) every second accounting year based on Replacement Cost Accounting for the following services
namely :
(i) Access Service – Wireless (Full Mobility)
(ii) Access Service – WLL
(iii) Access Service – Wireline
(iv) National Long Distance Service
(v) International Long Distance Service
The service provider is not required to furnish the Accounting Separation Reports based on Replacement
Cost Accounting for the first three years from the date of issue of licence.
b) The accounting separation reports prepared by the service provider and the audit report shall be
signed by the auditor or a partner of the firm, if a firm is appointed as auditor.
Chapter 19
Audit of Call Data Records (CDRs) to Assess / Determine / Verify Service
Provider- wise Liability of Transit Carriage Charge
Call Data Record (CDR) contains the record of the details of the call made by the customer of one
telecom service provider to the customer of other telecom service provider using the telecom
network of such other telecom service provider to carry or terminate (or both) the call. Usual
information on a CDR includes date, start time of call, end time of call, duration of call, originating
number and terminating number and other tariff related information from the tariff plan chosen by
the subscriber. Call Data Record (CDR) details is used to determine the transit carriage charges
which are the charges to be paid by one cellular operator to other operator for carriage of intra-
circle mobile traffic handed over by UASL/CMTS networks to Fixed network of other operator, at
Level II Trunk Automatic Exchange (TAX) of Long Distance Charging Area (LDCA) in which the call is
to be terminated, to the Short Distance Charging Area (SDCA).
The Auditor will assess or determine/ verify service providers-wise, service area-wise and month-
wise liability of each service provider in terms of transit carriage charges and report in the
prescribed format as per the requirement of the Order / Direction or Regulation issues by the
Telecom Regulatory Body. The verification of call data of service providers can be done on the basis
of call data records maintained by both the telecom service providers will be considered as parent
data.
The audit report should contain observations and recommendation also includes the summary and
explanation of the analysis of CDRs in the report format, if any prescribed.
Chapter 20
Audit of Metering and Billing System of Telecom Companies
1. Need for Metering and Billing Audit:
The Telecom Regulatory authority of India receives billing related complaints from the telecom
customers, consumer advocacy groups (CAGs) and from any other consumer welfare association.
The complaints are mainly related to lapses with regard to flaws in billing system, configuration
of systems in accordance with the applicable Tariff Plan, wrong billing due to linking of wrong
Tariff Plan, malfunctioning of software of the Telecom Service Providers due to which the
customers are wrongly billed. Through the implementation of Regulation, the Telecom
Regulatory Authority India (TRAI) ensures that telecom service Providers’ Metering and Billing
System is generating correct bills to the customers. To ensure this, the Telecom Regulatory
Authority India gets conducted the audit of the telecom service provider based on the
parameters with benchmarks for fair and reliable metering and billing system by notifying the
Quality of Service (Code of Practice for Metering and Billing Accuracy) Regulation 2006 dated
21st March 2006 and subsequently amended Regulation vide notification dated 25th March
2013.
Regarding the obligations of auditor, regulation 6B of the Quality of Service (Code of Practice for
Metering and Billing Accuracy) (Amendment) Regulations, 2013 , inter-alia, state that---
(1) Every auditor shall---
(a) undertake audit of the metering and billing system of a service provider in accordance with
the guidelines and checklist issued by the Authority under these regulations and it shall not
undertake audit of a service provider consecutively for more than two years; regulations
and it shall not undertake audit of a service provider consecutively for more than two
years;
(b) comply with the provisions of the regulations, directions, orders and instructions issued by
the Authority, from time to time.
down in the Code for Practice for Metering and Billing accuracy and his comments on
compliance reported by the service provider;
(v) certificate that he has received all information and explanation from the service
provider necessary for the conduct of audit; of audit;
(vi) comments on the authenticity of the information received from the service provider
for the purpose of the audit;
(vii) details of test calls, sample analysis made and the results thereof, separately for each
audit observations;
(viii) analysis of the complaints lodged in the records of the service provider to identify
whether the service provider had undertaken root cause analysis of such complaints; and
(ix) verification of action taken on the audit observations in the preceding year; and
(j) include in the audit report all the comments received from the service provider against each
audit observation.
(3) The Authority may refer complaints relating to billing, value added services and other
complaints for verification or investigation by the auditor and every auditor, to whom such
complaints have been referred by the Authority, shall verify and investigate such complaints and
furnish report thereon to the Authority within such time as the Authority may specify, from time
to time.
(4) If an auditor fails to comply with the provisions of these regulations, he shall be liable to be
removed from the panel of the auditors:
Provided that, reasonable opportunity shall be given to the auditor to explain the non-compliance
observed by the Authority.
C. audit the tariff plans having subscribers more than 10 % of the total subscribers will be
audited in each licensed service area. The number of sample size to be checked in each tariff
plan so that the verification should be such so as to achieve a confidence level of 95% at a
confidence interval of 3%.
D. take the raw CDRs post-mediated and unrated & process the same to generate the Bill and
then verify with already generated bill for any discrepancy. The CDRs of last three months
are to be processed. In all cases metering and mediation process to be checked first by
sample test calls to ascertain that metering and mediation process is accurate and no
systemic deficiency is noticed. After doing the functional testing of the mediation
process/software, unrated post-mediated CDRs may be used for generating the bills for
audit analysis.
E. make sample test calls using test SIM Cards/ telephone for every possible charge scenario
and corresponding accuracy of rating procedures by the IN system can be established in the
case of Prepaid billing, rated CDRs are produced by the IN system to verify that the billing is
as per the applicable tariff plan. In the absence of any un-rated CDRs, backward
reconciliation of rated CDRs from IN system shall be done to further establish correctness of
rating procedures based on sample bills generated for the sample test calls.
6. Independence of Auditors:
The Auditors must be independent and should not have business relationship during the last
one year with of telecom service providers. The Auditors should avoid direct involvement in the
design, construction, operation or maintenance of electronic communications networks or
Guidance Note on Internal Audit of Telecommunication Industry Page 77
The Institute of Cost Accountants of India
communications metering and / or billing solutions. They shall not represent parties engaged in
these activities.
The telecom service provider shall not appoint an auditor (a) consecutively for more than two
years; (b) who is its internal auditor.
7. Qualification of Auditors:
The Auditor should have accreditation from the Quality Council of India/ National Accreditation
Board for Certification Bodies or from the International Accreditation Forum or should be an
audit firm registered with the Institute of Chartered Accountants of India/ Institute of Costs
Accountants of India having experience in technical audit of similar nature to carry out the
Metering and Billing approval process as defined in the Quality of Service (Code of Practice for
Metering and Billing Accuracy) Regulation 2006 as amended from time to time by the Telecom
regulatory authority of India. The Auditor should preferably be qualifies as system auditor or
have proven experience in the audit of Billing System used for prepaid customers / Billing
System of Credit Card System besides having expertise of understanding of software relating to
telecommunication / communication system & technology / Information Technology (IT).
The service provider cannot increase Verify from bills to ensure that no
tariff on any item within six months of tariff item has been hiked during the
enrolment in a tariff plan. six months period specified in the
st
Telecommunication Tariff Order (31 Tariff Order.
amendment) notified on 07.07.2004
refers.
The customer is free to move from one To verify from bills of subscribers
tariff plan to another without paying any who have changed their tariff plans
fee for migration. to ensure that no migration charges
have been levied.
1.2 The information required in the clause above Obtain website URL.
shall be available on the Service Provider’s web Log onto website and verify whether
site, as prescribed in TRAI Direction No.301- mentioned details are available for
26//2003-TRAI (Econ.) dated 2nd May, 2005 each Tariff plan.
(Format- C). Establish whether above information
is available on the website in
accordance with TRAI directives.
1.3 Where a value-added service (e.g. download of Take a list of all value-added services.
content, such as a film clip or ring tone) or entry Take sample from each value-added
to an interactive service (such as a game) can be service and check the procedures
selected through a choice of the service user completely.
(e.g. by dialing a specific number) then the Verify whether the charge for the service
charge for the service must be provided to him is indicated before subscriber commits
before he commits to use the service. to use the service.
d) where the charges are dependent upon the Test check sample records to
counting of occurrences of a particular type, establish correctness of parameters.
the count shall be accurate to no more than
plus 1/25,000 (0.004%) or minus 1/1,000
(0.1%).
5.1 For post-pay accounts, payments made by a Review the payment credit system.
customer shall be credited to his account within Take payments sample to check
3 working days of receipt of the cash/ cheque. whether the credit is applied
Where credit is given by the service provider, this correctly.
shall be applied within one working day of its Check that the payments made by
agreement. the customer are regularly updated
in the billing system.
Updation in respect of post-pay
customers to be credited within 3
working days of receipt of the
cash/cheque.
5.2 For pre-pay accounts, top-up credit shall be Review the system settings and take
applied to a customer’s account within 15 sample cases to test whether the
Chapter 21
Audit of Functional Areas
Every organisation would have Standard Operating Procedures (SOPs) to ensure internal control and
proper functioning of all the departments. Hence, it forms the main basis for the internal auditor to
evaluate these functions. The internal auditor should ask for the copies of all the SOPs used by an
organisation. In case, there are no written down SOPs in vogue, the internal auditor should discuss with
the management/heads of departments and then document these for each department. The internal
auditor has to refer to the overall operating framework of policies, practices, systems, management
philosophy, values and actions which exist in an organization to ensure that:
essential organization objectives are achieved and goals have been met;
assets are protected and risks are managed;
legal requirements are invariably complied with;
information used to report to Revenue is accurate;
compliance with the internal control procedures & risks asserted;
The incidences of wastages & misappropriation;
The expenses incurred during a period and the trend of expenses over a period of time; and
Operational efficiencies of the departments
The general procedure to be followed for internal audit of the support departments is suggested as
follows:
Setting of the internal audit objectives with regard to the audit criteria/benchmark so that the
causes for the variations could be assessed and reported along with the effect of such variations
on the organization.
Setting the scope of the audit with regard to the audit period, the audit units such as locations/
departments etc. so that the resources could be planned.
Collect the information on the departmental activity carried out, the budgets etc. from various
sources of information.
Put forward the results of internal control review through control testing procedures carried out.
Summarize the report for the department.
achieved, risks are assessed and managed, appropriate reviews of the operation’s performance are
made, and that information sharing and communications occur in a timely, accurate and appropriate
fashion, with due regard for protection of valuable information.
However, to judge its effectiveness it is necessary that internal auditor should prepare a questionnaire
containing mainly following matters/ questions:
Does the company have a functioning Audit Committee?
Is the audit made on a surprise basis rather than scheduled in advance?
Is an audit also performed when there is a change of officers?
Are records of the audit documented and the results kept in the files?
Is controls exercised on the financial information dissemination?
Administration Department
The significance of an administration department assumes a different proportion in the Telecom sector.
In many companies administration department may be combined with HR or Accounts depending upon
the size of the organisation. The checklist given below is based on the assumption of a separate
Administration department:
Define the audit objective and scope of the work
For each administrative process, study the SOPs, schedule of authorities etc.
Decide the sample size and obtain sample data as an audit evidence
Observe the variations with respect to the SOPs
Assess the risks and value impact on the organisation
Arrive at the audit findings and conclusions
Areas to be checked in administration:
Office routine procedures for authorization and approval
Office maintenance and utilities
Compliances with laws such as Shop act, Weights & measures, property tax laws etc.
Office rental agreements and compliance
Health, safety and environmental aspects
Factory administration compliances such as Factory Act, Payment of wages act, Minimum wages
act etc.
Administrative purchases and policies thereof
The total administrative expenses analysis v/s budgets
Administration expenses as a percentage of total cost of sales and the trend over a period of time
The Internal auditors should also check MIS generated periodically on the administrative matters
including the areas of critical importance for the management of the organization.
Procurement Department
In the Telecom industries the procurement may not actually involve buying of raw material, but may be
required to buy utilities and services. In light of this the internal auditor should analyze the operating
activities of procurement department. The following general checklist may be suitably amended to suit
the needs of Telecom industries:
Obtain the purchase procedures regarding vendor sourcing, vendor registration, vendor
evaluation, quotation, tendering, vendor selection, and ordering
Assess how the procurement quantity and time of requirement decided through the indenting
process
Assess how the ad-hoc and emergency purchases handled
Are the Purchse Orders (POs) issued as per the schedule of authority?
Receipt of materials to be only against valid purchase order and from registered vendors
Process of material acceptance with regard to the specified quality norms
Appropriate insurance coverage for the inventory
Physical stock taking procedures and reconciliations with the book records
The contracts with vendors (long terms & short term), rate agreements, quantity agreements
The documents for verification:
Requests for proposals (RFP)
Quotation/tender analysis sheets
Purchase orders
Inventory verification & reconciliation sheets
Financial and Cost Accounting records
Accounting
The checklist for the accounts and finance departments should cover the following:
The accounting policy adopted for treatment of different financial elements such as incomes,
expenses, assets, liabilities and equity.
Guidance Note on Internal Audit of Telecommunication Industry Page 93
The Institute of Cost Accountants of India
Finance
The policies and procedures adopted for financial management processes;
The schedule of authority included authorized signatories for banking and such other transactions;
The policy on capital structure;
The methods of raising funds, the authorities for raising loans etc.;
Loan document registration and filing;
Interest payments and maintaining the loan agreement covenants
The trends in financing costs;
The methods of capital expenditure evaluation;
The debt ratios, interest cover ratios;
The banking facilities and agreements for consortium or independent banking;
The authorizations for banking transactions, and;
The data utilization (and non-utilization) of bank facilities
Receipt of Revenue
General principles of revenue recognition as per AS 9 are to be applied; however, the revenue
recognition aspects in the telecom industry are different. In the telecom service sector, the Gross
revenue (GR) and Adjusted Gross revenue (AGR), on which Licence Fee And Spectrum Usage charges ( for
services in which spectrum is used) is levied as revenue share basis, is computed in accordance with the
terms & conditions of applicable Licence e.g., Unified Access Service licence (UASL).
Further revenue is generated by a telecom company from Billing to Post Paid Subscribers, amount paid
by pre-paid subscribers, Billing to Broadband Customers, Billing to IDC Customers, Sales of RCV’s / E-
recharge and Sales of Handsets and Accessories etc. The Internal Auditor has to determine that proper
procedures are followed in handling of receipt of revenue from customers and review the records to
determine whether the required reports are being accurately and promptly prepared and verify tha tall
receipts are properly accounted for in the books of accounts. Thus the internal auditor should:
verify proper booking of all the receipts and amount received is correctly accounted in the
customer’s account.
reconcile cash receipts at each counter with CDR system to avoid fraud by the officials managing
the counters.
verify that receipts of cash and remittances posted accurately and on a daily basis in the correct
account.
check that amount received promptly deposited in an interest-bearing account.
verify funds that have not yet been deposited adequately protected?
see the cases of delay in depositing/ non-depositing the amount collected in the bank.
verify proper safeguards of accounts, signatories on bank accounts and verify that all Bank
Accounts are in name of company.
verify the system of reconciliation of various bank accounts and controls in place to ensure
collections made at various collection centers are properly monitored.
verify the management of bouncing of cheques of customer.
Check the cases of delay in transfer of amount collected to central pool account.
ensure that there is proper control over printing, issue, use of Manual Receipt Books and
reconciliation of used receipt books.
ensure that the Receipts Journal and Disbursements Journal summarized on a monthly basis.
check that for all paid bills, statements and expense vouchers kept for records.
check that the each bill and expense voucher paid show the check number, payment date, to
whom paid, and the correct account classification code for the expense.
check the system when an individual is approving his own expenses?
Disbursements of Funds
Money from bank accounts used during ordinary business activities are to be spent only on the basis of
approved bills and expense vouchers. Internal Auditor should review the following:
Is the money withdrawn from Bank account used strictly for the purpose it is withdrawn?
Have any cheques or withdrawal slips been signed by the same officer who approved the
expenditure or withdrawal?
Are all Banks accounts reconciled with the bank statements promptly each month?
What is the procedure if discrepancies in the reconciliation are uncovered or if there are unusual
or suspicious circumstances about disbursements or authorization for payment?
The auditor should reconcile the bank accounts on a random basis during the audit.
Advances
Internal auditor should review the advance paid to staff/ third parties. Outstanding advances should be
reviewed and check that:
are advances to staff / third parties approved by the appropriate authority?
are such advances made for periods normally not exceeding the period as per company policy?
Records Retention
Internal auditor has to verify that the company keeps records that support items reported on their
books or tax returns until the statute of limitations for the return expires. The internal auditor must
determine that certain legal requirements are being met with regard to keeping and maintenance of
records, including:
Were any licenses or permits required for an activity duly obtained?
If special taxes (property taxes, Service tax, excise taxes, VAT etc.) were due, whether provisions
made to remit them.
Determine and verify applicable use of state Sale Tax/VAT tax reporting.
Whether service taxes collected have been deposited in time?
Verify that all offices are reporting on a regular basis and that their data is included in annual
Telecom Annual Reports.
Salary Audit
Check if the appointment letter are properly authorized and are as per the policies
Assess the overrides in the salary agreed which is different than the normal scales
Obtain information on the incentive plan for individuals & groups at all the levels of
management
Understand the parameters for incentive calculations and compare the actual with the plans
Verify the incentives approved with regard to the measured performance
The internal auditor taking in view of above should verify that the company has proper systems and
processes to control dealing with the manpower, their remuneration, incentives and other benefits
given to employees of the company.
Verify that sales are not inflated by the dealers/ distributors to achieve the targets.
verify the methods and process to monitor promotional schemes expenses.
Verify the system and process of identifying the eligible winner for prizes of promotional
schemes.
Share of marketing expenses such as advertising, promotion, incentives, commissions etc in
total cost.
Advertisement through Print media, Hoardings, Signage, Electronic Media, Sponsorship of
events.
verify that advertisement is displayed at the contracted location, and that advertisements on
hoardings are displayed at various location sites for a contracted period.
Verify the provision for change of advertisement contents during the agreement period.
In the case of radio and TV advertisements, ensure that Broadcast/ display of advertisement
for agreed time slot.
Verify that advertising agency has passed on all the discounts on rate negotiation to the
company in case of bulk advertising.
Verify that Telecom Company has a proper understanding with the shopkeeper about return
of signages.
Following Performance indicators for sales & marketing can be taken into account by the internal
auditor such as:
New customers added
Customer churn ratio
Customer complaints & their resolution
Increase in market share
Customer satisfaction index
IT Department
Telecom industries is highly IT enabled sector. Telecommunication companies invariable get access to the
IT system to operate and provide services to the customers which is directly linked to the database of the
IT system. The IT department of an organisation has to ensure that the systems are absolutely safe, user-
friendly and available all the time. The job of an internal audit essentially becomes important to check
strict adherence to internal controls, risks related to the safety of individual customer’s information,
probabilities of unauthorized access, possibility of hacking etc. It naturally becomes a potentially
vulnerable area for audit. The internal auditor should exercise utmost care and diligence in carrying out
the audit procedures that are related to the IT systems in the service organisation as mentioned above.
The control parameters that the internal auditor should concentrate on could be:
The IT management including access control, back-up and recovery, IT environment costs
IT inventory
IT operations
IT security related to the system design
IT service agreements
Data protection and security e.g. antivirus, antimalware, internet related securities, anti system
hacking steps.
The following checklist would help the internal auditor to conduct the audit of the above named control
parameters of the IT department.
IT Department Structure
Check that the function is fully in house or outsourced or a combination thereof
Checking of the service agreements for outsourced IT services
Check the profile of the IT personnel (professional as well as others)
Review the reporting of the IT department
Are the IT staff allowed to input transactions in the system (this activity is potential risk to the IT
system)
IT Inventory
The physical verification of the IT inventory (hardware, operating system software, networking
equipment and application software etc.) at all locations;
The maintenance contracts for the IT equipment;
Equipment replacement policy, and;
Equipment and software license status.
IT Processes
Are the IT processes clearly defined in the manual?
Is there a proper documentation regarding system design, application programs, database
administration, data entry, disaster recovery & back up processes?
Checking of the processes for making changes to the programs, authorization thereof, testing
procedures.
Test checking of documentation.
Risks Assessment
Risks arising and their impact on the organisation and also from external people who access the
system;
Risks of unauthorized changes to the hardware and software and system hacking;
Risks related to authorized log-in and system abuse;
Risk arising out of system failure;
Risks arising from loss of system integrity;
Risks arising from virus to the system files, program and the application software.
Bill Verification
Internal auditor has to verify the following:
Verify bulk and incremental discounts and taxation methodologies;
Policy for discount prorating when change in discount rate during bill cycle;
Verify special balance-due amounts to exclude
Disputed amounts
Amounts in collections
Amounts on invoices whose payment date has not yet been passed
Check different discount Rates & special rates based on customer category;
Verify special rate, discount or both with customizable plan Id;
Verify special rate, discount or both - Demonstrate Cross product discount;
Check Friends &Family using Corridor plan feature;
Verify invoice cycle including annual, monthly, bi-monthly, quarterly, weekly and even daily
cycles;
Various options with regard to the timing within each bill cycle when the customer receives an
invoice;
Verify Invoice timing enabling customers to change invoice cycles;
Verification of Discount based on the accumulated gross amount of qualifying usage charges
during a specified period Discount should get applied only on usage that falls between bill period;
Flexible formatting of Invoices/ Bills;
Preparation of detailed bill based on type of usage like Local, STD, ISD;
Separate taxes to both products and services;
Verification of tax in a flexible manner, either in the form of a fixed amount, a percentage or
combination of both, and;
Display of Tax in flexible manner i.e. different components like education cess, higher education
cess should be displayed separately and accordingly reports should be generated.
Tests on Roaming
Check the agreement of partnership between local operator and remote operator;
Application of rate, tax& surcharge for in-roamer usage records;
Check Roaming system supports different rates for different operators and various reports as
prescribed by Corporate office or for operational requirement.
Chapter 22
Cost Audit Specific to Telecom Industry
Telecom sector being a regulated industry first time was covered under Cost Accounting Records
(Telecommunications) Rules 2002 published vide G.S.R. 689(E) dated 8th October, 2002 issued under
Section 209 (1) (d) of the Companies Act, 1956.
Till year 2010, the Companies were covered under Cost Audit by specific orders issued by Central
Government to a Company/Industry. The Ministry of Corporate Affairs notified the Cost Accounting
Records (Telecommunication Industry) Rules, 2011 on 7th Dec 2011 which were applicable to all the
companies including foreign company as defined under section 591 of the Companies Act, 1956 and
engaged in Telecommunication services. Companies covered under the Cost Audit were required to
conduct the cost audit under Cost Audit Order No.52/26/CAB-2010 dated 2nd May 2011/ 6th
November 2012 and were required to e-file the cost audit report in XBRL Format as per the provisions
of Companies (Cost Audit Report) Rules 2011 issued by Ministry of Corporate Affairs vide GSR 430(E)
dated 3rd June 2011.
The Ministry of Corporate Affairs, Government of India has again revised the above rules pursuant to
provisions contained in the Companies Act 2013 relating to maintenance of cost records and cost audit
vide Section 148(1) and (2) and notified “Companies (Cost Records and Audit) Rules 2014 vide GSR
425(E) dated 1st July 2014. These Rules have been amended vide Companies (Cost Records and Audit)
Amendment Rules 2014 vide GSR 01(E) dated 1st January 2015. As per Companies (Cost Records and
Audit) Rules 2014 as amended, the Telecom Industry is covered for maintenance of cost records and
cost audit. The provisions of the said Rules are given below:
Application of cost records: As per Rule 3 for the purposes of sub-section (1) of Section 148 of the Act,
the class of companies, including foreign companies defined in clause (42) of Section 2 of the Act,
engaged in the production of the goods or providing services under Item (A) Regulated Sectors:
Telecommunication services made available to users by means of any transmission or reception of signs,
signals, writing, images and sounds or intelligence of any nature (other than broadcasting services) and
regulated by the Telecom Regulatory Authority of India ("TRAI") under the Telecom Regulatory Authority
of India Act, 1997, having an overall turnover from all its products and services of rupees thirty five crore
or more during the immediately preceding financial year, shall include cost records for such products or
services in their books of account.
Provided further that nothing contained in this rule shall apply to a company which is classified as a
micro enterprise or a small enterprise including as per the turnover criteria under sub-section (9) of
section 7 of the Micro, Small and Medium Enterprises Development Act, 2006 (27 of 2006).
(a) The cost records are to be maintained in the Form-CRA-1 of the said Rules by the companies on
which these rules are applicable. The gist of the details required to be maintained under Form CRA-
1 by the companies are as follows:
Material Cost
Employee Cost
Utilities
Direct Expenses
Repairs and Maintenance
Fixed Assets and Depreciation
Overheads
Administrative Overheads
Transportation Cost
Royalty and Technical Knowhow
Research and Development Expenses
Quality Control Expenses
Pollution Control Expenses
Service Department Expenses
Packing Expenses
Interest and Finance Charges
Other Cost items
Capacity determination
Work in Progress and Finished Goods Stock
Captive Consumption
By-products and joint products
Adjustment of Cost Variances
Reconciliation of cost and financial accounts
Related party transactions
Expenses or Incentives on exports
Production Records
Sales Records
Cost Statements
Statistical records
Records of physical verification
(b) The cost records referred to in sub-rule (1) shall be maintained on regular basis in such manner as to
facilitate calculation of per unit cost of production or cost of operations, cost of sales and margin for
each of its products and activities for every financial year on monthly or quarterly or half-yearly or
annual basis.
(c) The cost records shall be maintained in such manner so as to enable the company to exercise, as far
as possible, control over the various operations and costs to achieve optimum economies in
utilization of resources and these records shall also provide necessary data which is required to be
furnished under these rules.
There cannot be any exhaustive list of cost records. This would depend on the materiality of cost
components in the cost of the production of goods or provision of services.
The abridged cost statement can be used as a sample cost statement. This may be modified according to
the need of the company.
Sub-rule (3) of Rule 4 provides that the requirement for cost audit under these rules shall not apply to a
company which is covered in rule 3, and-
(i) whose revenue from exports, in foreign exchange, exceeds seventy five per cent of its total revenue; or
(ii) which is operating from a special economic zone.
(i) Part-A of CRA-3 includes General Information about Company, General information of Cost
Auditor, Cost Accounting Policy, and Product/ Service details. It has been provided to explain the
difference, if any, between turnover as per annual accounts and turnover as per excise / service
tax records.
(ii) Part-B of CRA-3 provides for manufacturing sector:
Quantitative Information.
Abridged Cost Statement.
Details of Material Consumed.
Details of Utilities Consumed.
Details of Industry Specific Operating Expenses.
All the above annexures are to be prepared for each product with CETA Code separately.
Submission of Cost Audit Report to Central Government: Every company covered under these rules
shall, within a period of thirty days from the date of receipt of a copy of the cost audit report, furnish the
Central Government with such report alongwith full information and explanation on every reservation or
qualification contained therein, in form CRA-4 alongwith fees specified in the Companies (Registration
Offices and Fees) Rules, 2014.
Chapter 23
Checklist for Statutory & Regulatory Compliances Telecom
2. Check the
timeframe within
which it is responded
to?
6. Ensure that the Excess/ wrong 1. Understand how the 1. Working
basis of calculation payment of Fees for calculation for Fees for papers for
of regulatory Revenue sharing Revenue Sharing is to calculation of
charges such as Fees resulting in loss of be done & ensure that amount of
for Revenue Sharing funds while short such calculations have Fees for
etc., are correct & payment will lead to been made Revenue
accordingly such interest payments. accordingly. Sharing etc.
dues have been duly 2. Check whether it 2. Obtain the
19. Ensure in the case Lack of these Check if the office Obtain the
of following documents will premises the Building original/
Office Premises weaken our stand in plan sanction, photocopies of
– whether future legal completion certificate various
building plan proceedings. etc. are timely approvals/
sanction, obtained & properly sanctions
completion maintained. received for
certificate etc. office premises &
are properly for
obtained advertisement
Advertising banners,
Banners / hoardings etc.
Hoarding –
whether
approval from
municipal
corporation /
PWD etc. is duly
obtained
20. What is the amount Same mistake 1. Examine the Obtain the
of fines/ penalties repeating again schedule of expense schedule
imposed during the resulting in re- expenses & for fines &
period imposition of identify if there penalties.
Analyse the penalties which are are some fines/
reasons for avoidable. penalties
such levy & imposed.
whether it was 2. Check the assets
avoidable. accounts wherein
What are the some penalties
chances of may have been
imposition of included in the
this penalty/ total cost and
fine again? capitalised.
3. Enquire the
reasons for the
same & examine if
there are some
steps taken so as
to minimize its re-
occurrence.
21. Whether the Penalties/ legal Verify the following Obtain a copy of
payment for proceedings in case for the electricity the clearance
expenditure of of non-compliance. connections at cell from State
electricity sites: Electricity Board.
connection at cell State Electricity Obtain copy of
sites is timely made Board clearances electricity bills
& ensures no extra are obtained. paid in the past
amount is charged. Check the proof of along with the
payment the supporting bills
of
dues in case the and proof of
Annexure I
FORM CRA-1
(Pursuant to rule 5(1) of the Companies (Cost Records and Audit) Rules, 2014)
Particulars relating to the Items of Costs to be included in the Books of Accounts
1. Material Costs-
(a) Proper records shall be maintained showing separately all receipts, issues and balances both in
quantities and cost of each item of raw material or input services (including all direct charges)
required for the production of goods or rendering of services under reference.
(b) The material receipt shall be valued at purchase price including duties and taxes, freight inwards,
insurance, and other expenditure directly attributable to procurement (net of trade discounts,
rebates, taxes and duties refundable or to be credited by the taxing authorities) that can be
quantified with reasonable accuracy at the time of acquisition.
(c) Finance costs incurred in connection with the acquisition of materials shall not form part of material
cost.
(d) Self-manufactured materials shall be valued including direct material cost, direct employee cost,
direct expenses, factory overheads, share of administrative overheads relating to production but
excluding share of other administrative overheads, finance cost and marketing overheads.
(e) Spares which are specific to an item of equipment shall not be taken to inventory, but shall be
capitalized with the cost of the specific equipment. Cost of capital spares and or insurance spares,
whether procured with the equipment or subsequently, shall be amortised over a period, not
exceeding the useful life of the equipment.
(f) Normal loss or spoilage of material prior to reaching the factory or at places where the services are
provided shall be absorbed in the cost of balance materials net of amounts recoverable from
suppliers, insurers, carriers or recoveries from disposal.
(g) Losses due to shrinkage or evaporation and gain due to elongation or absorption of moisture etc.,
before the material is received shall be absorbed in material cost to the extent they are normal, with
corresponding adjustment in the quantity.
(h) The forex component of imported material cost shall be converted at the rate on the date of the
transaction. Any subsequent change in the exchange rate till payment or otherwise shall not form
part of the material cost.
(i) Any demurrage or detention charges, or penalty levied by transport or other authorities shall not
form part of the cost of materials.
(j) Subsidy or Grant or Incentive and any such payment received or receivable with respect to any
material shall be reduced from cost for ascertainment of the cost of the cost object to which such
amounts are related.
(k) Issues shall be valued using appropriate assumptions on cost flow, e.g. First-in-First-out, Last-in-
First-out, Weighted Average Rate. The method of valuation shall be followed on a consistent basis.
(l) Where materials are accounted at standard cost, the price variances related to materials shall be
treated as part of material cost.
(m) Any abnormal cost shall be excluded from the material cost.
(n) Wherever, material costs include transportation costs, determination of costs of transportation shall
be governed by Para No. 9 on Determination of Cost of Transportation.
(o) Self-manufactured components and sub-assemblies shall be valued including direct material cost,
direct employee cost, direct expenses, factory overheads, share of administrative overheads relating
to production but excluding share of other administrative overheads, finance cost and marketing
overheads.
(p) The material cost of normal scrap or defectives which are rejects shall be included in the material
cost of goods manufactured. The material cost of actual scrap or defectives, not exceeding the
normal shall be adjusted in the material cost of good production. Material Cost of abnormal scrap or
defectives should not be included in material cost but treated as loss after giving credit to the
realisable value of such scrap or defectives.
(q) Material costs shall be directly traced to a Cost object to the extent it is economically feasible or
shall be assigned to the cost object on the basis of material quantity consumed or similar
identifiable measure and valued as per above principles.
(r) Where the material costs are not directly traceable to the cost object, the same shall be assigned on
a suitable basis like technical estimates.
(s) Where a material is processed or part manufactured by a third party according to specifications
provided by the buyer, the processing or manufacturing charges payable to the third party shall be
treated as part of the material cost.
(t) Wherever part of the manufacturing operations or activity is subcontracted, the subcontract charges
related to materials shall be treated as direct expenses and assigned directly to the cost object.
(u) The cost of indirect materials shall be assigned to the various Cost objects based on a suitable basis
such as actual usage or technical norms or a similar identifiable measure.
(v) The cost of materials like catalysts, dies, tools, moulds, patterns etc, which are relatable to
production over a period of time shall be amortized over the production units benefited by such
cost.
Guidance Note on Internal Audit of Telecommunication Industry Page 124
The Institute of Cost Accountants of India
(w) The cost of indirect material with life exceeding one year shall be included in cost over the useful life
of the material.
2. Employee Cost
a) Proper records shall be maintained in respect of employee costs in such a manner as to enable the
company to book these expenses cost centre wise or department wise with reference to goods or
services under reference and to furnish necessary particulars. Where the employees work in such a
manner that it is not possible to identify them with any specific cost centre or service centre or
department, the employees cost shall be apportioned to the cost centre or service centres or
departments on equitable and reasonable basis and applied consistently.
b) Employee Cost shall be ascertained taking into account the gross pay including all allowances
payable along with the cost to the employer of all the benefits.
c) Bonus whether payable as a Statutory Minimum or on a sharing of surplus shall be treated as part of
employee cost. Ex gratia payable in lieu of or in addition to Bonus shall also be treated as part of the
employee cost.
d) Remuneration payable to Managerial Personnel including Executive Directors on the Board and
other officers of a corporate body under a statute shall be considered as part of the Employee Cost
of the year under reference whether the whole or part of the remuneration is computed as a
percentage of profits. Remuneration paid to non-executive directors shall not form part of Employee
Cost but shall form part of Administrative Overheads.
e) Separation costs related to voluntary retirement, retrenchment, termination etc. shall be amortised
over the period benefitting from such costs.
f) Employee cost shall not include imputed costs.
g) Cost of Idle time is ascertained by the idle hours multiplied by the hourly rate applicable to the idle
employee or a group of employees.
h) Where Employee cost is accounted at standard cost, variances due to normal reasons related to
Employee cost shall be treated as part of Employee cost. Variances due to abnormal reasons shall be
treated as part of abnormal cost.
i) Any Subsidy, Grant, Incentive or any such payment received or receivable with respect to any
Employee cost shall be reduced for ascertainment of cost of the cost object to which such amounts
are related.
j) Any abnormal cost where it is material and quantifiable shall not form part of the Employee cost.
k) Penalties, damages paid to statutory authorities or other third parties shall not form part of the
Employee cost.
l) The cost of free housing, free conveyance and any other similar benefits provided to an employee
shall be determined at the total cost of all resources consumed in providing such benefits.
m) Any recovery from the employee towards any benefit provided, namely, housing shall be reduced
from the employee cost.
n) Any change in the cost accounting principles applied for the determination of the Employee cost
should be made only if it is required by law or for compliance with the requirements of a cost
accounting standard or a change would result in a more appropriate preparation or presentation of
cost statements of an enterprise.
o) Where the Employee services are traceable to a cost object, such Employees’ cost shall be assigned
to the cost object on the basis such as time consumed or number of employees engaged etc. or
similar identifiable measure.
p) While determining whether a particular Employee cost is chargeable to a separate cost object, the
principle of materiality shall be adhered to.
q) Where the Employee costs are not directly traceable to the cost object, these may be assigned on
suitable basis like estimates of time based on time study.
r) The amortised separation costs related to voluntary retirement, retrenchment, and termination etc.
for the period shall be treated as indirect cost and assigned to the cost objects in an appropriate
manner. However unamortised amount related to discontinued operations, shall not be treated as
employee cost.
s) Recruitment costs, training cost and other such costs shall be treated as overheads and dealt with
accordingly.
t) Overtime premium shall be assigned directly to the cost object or treated as overheads depending
on the economic feasibility and the specific circumstance requiring such overtime.
u) Idle time cost shall be assigned direct to the cost object or treated as overheads depending on the
economic feasibility and the specific circumstances causing such idle time.
3. Utilities
a) Proper records shall be maintained showing the quantity and cost of each major utility such as
power, water, steam, effluent treatment, etc. produced and consumed by the different cost centres
in such detail as to have particulars for each utility separately.
b) Each type of utility shall be treated as a distinct cost object.
c) Cost of utilities purchased shall be measured at cost of purchase including duties and taxes,
transportation cost, insurance and other expenditure directly attributable to procurement (net of
trade discounts, rebates, taxes and duties refundable or to be credited) that can be quantified with
reasonable accuracy at the time of acquisition.
d) Cost of self-generated utilities for own consumption shall comprise direct material cost, direct
employee cost, direct expenses and factory overheads.
e) In case of Utilities generated for the purpose of inter unit transfers, the distribution cost incurred for
such transfers shall be added to the cost of utilities determined as above.
f) Cost of Utilities generated for the intercompany transfers shall comprise direct material cost, direct
employee cost, direct expenses, factory overheads, distribution cost and share of administrative
overheads.
g) Cost of Utilities generated for the sale to outside parties shall comprise direct material cost, direct
employee cost, direct expenses, factory overheads, distribution cost, share of administrative
overheads and marketing overheads. The sale value of such utilities shall also include the margin.
h) Finance costs incurred in connection with the utilities shall not form part of cost of utilities.
i) The cost of utilities shall include the cost of distribution of such utilities. The cost of distribution will
consist of the cost of delivery of utilities up to the point of consumption.
j) Cost of utilities shall not include imputed costs.
k) Where cost of utilities is accounted at standard cost, the price variances related to utilities shall be
treated as part of cost of utilities and the portion of usage variances due to normal reasons shall be
treated as part of cost of utilities. Usage variances due to abnormal reasons shall be treated as part
of abnormal cost.
l) Any Subsidy or Grant or Incentive or any such payment received or receivable with respect to any
cost of utilities shall be reduced for ascertainment of the cost to which such amounts are related.
m) The cost of production and distribution of utilities shall be determined based on the normal capacity
or actual capacity utilization whichever is higher and unabsorbed cost, if any, shall be treated as
abnormal cost. Cost of a Stand-by Utility shall include the committed costs of maintaining such a
utility.
n) Any abnormal cost where it is material and quantifiable shall not form part of the cost of utilities.
o) Penalties, damages paid to statutory authorities or other third parties shall not form part of the cost
of utilities.
p) Credits or recoveries relating to the utilities including cost of utilities provided to outside parties,
material and quantifiable, shall be deducted from the total cost of utility to arrive at the net cost of
utility.
q) Any change in the cost accounting principles applied for the measurement of the cost of utilities
shall be made only if, it is required by law or for compliance with the requirements of a cost
accounting standard, or a change would result in a more appropriate preparation or presentation of
cost statements of an organisation.
r) While assigning cost of utilities, traceability to a cost object in an economically feasible manner shall
be the guiding principle.
s) Where the cost of utilities is not directly traceable to cost object, it shall be assigned on the most
appropriate basis.
t) The most appropriate basis of distribution of cost of a utility to the departments consuming services
is to be derived from usage parameters.
4. Direct Expenses
a) Proper records shall be maintained in respect of direct expenses in such a manner as to enable
company to book these expenses cost centre wise or cost abject or department wise with reference
to goods or services under reference and to furnish necessary particulars.
b) Direct expenses incurred for the use of bought out resources shall be determined at invoice or
agreed price including duties and taxes, and other expenditure directly attributable thereto net of
trade discounts, rebates, taxes and duties refundable or to be credited.
c) Other expenses shall be determined on the basis of amount incurred in connection therewith.
d) Direct Expenses paid or incurred in lump-sum or which are in the nature of ‘one – time’ payment,
shall be amortised on the basis of the estimated output or benefit to be derived from such direct
expenses.
e) If an item of Direct Expenses does not meet the test of materiality, it can be treated as part of
overheads.
f) Finance costs incurred in connection with the self-generated or procured resources shall not form
part of Direct Expenses. Direct Expenses shall not include imputed costs.
g) Where direct expenses are accounted at standard cost, variances due to normal reasons shall be
treated as part of the Direct Expenses. Variances due to abnormal reasons shall not form part of the
Direct Expenses.
h) Any Subsidy or Grant or Incentive or any such payment received or receivable with respect to any
Direct Expenses shall be reduced for ascertainment of the cost of the cost object to which such
amounts are related.
i) Any abnormal portion of the direct expenses where it is material and quantifiable shall not form part
of the Direct Expenses.
j) Penalties, damages paid to statutory authorities or other third parties shall not form part of the
Direct Expenses.
k) Credits or recoveries relating to the Direct Expenses, material and quantifiable, shall be deducted to
arrive at the net Direct Expenses.
l) Any change in the cost accounting principles applied for the measurement of the Direct Expenses
should be made only if, it is required by law or for compliance with the requirements of a cost
accounting standard, or a change would result in a more appropriate preparation or presentation of
cost statements of an organisation.
m) Direct Expenses that are directly traceable to the cost object shall be assigned to that cost object.
i) Cost of spares replaced which do not enhance the future economic benefits from the existing asset
beyond its previously assessed standard of performance shall be included under repairs and
maintenance cost.
j) High value spare, when replaced by a new spare and is reconditioned, which is expected to result in
future economic benefits, the same shall be taken into stock. Such a spare shall be valued at an
amount that measures its service potential in relation to a new spare which amount shall not exceed
the cost of reconditioning the spare. The difference between the total of the cost of the new spare
and the reconditioning cost and the value of the reconditioned spare should be treated as repairs
and maintenance cost.
k) The cost of major overhaul shall be amortized on a rational basis.
l) Finance costs incurred in connection with the repairs and maintenance activities shall not form part
of Repairs and maintenance costs.
m) Repairs and maintenance costs shall not include imputed costs.
n) Price variances related to repairs and maintenance, where standard costs are in use, shall be treated
as part of repairs and maintenance cost. The portion of usage variances attributable to normal
reasons shall be treated as part of repairs and maintenance cost. Usage variances attributable to
abnormal reasons shall be excluded from repairs and maintenance cost.
o) Subsidy or Grant or Incentive or amount of similar nature received or receivable with respect to
repairs and maintenance activity, if any, shall be reduced for ascertainment of the cost of the cost
object to which such amounts are related.
p) Any repairs and maintenance cost resulting from some abnormal circumstances, e.g., major fire,
explosions, flood and similar events, if material and quantifiable, shall not form part of the repairs
and maintenance cost.
q) Fines, penalties, damages and similar levies paid to statutory authorities or other third parties shall
not form part of the repairs and maintenance cost.
r) Credits or recoveries relating to the repairs and maintenance activity, material and quantifiable,
shall be deducted to arrive at the net repairs and maintenance cost.
s) Any change in the cost accounting principles applied for the measurement of the repairs and
maintenance cost should be made only if, it is required by law or for compliance with the
requirements of a cost accounting standard, or a change would result in a more appropriate
preparation or presentation of cost statements of an organisation.
t) Repairs and maintenance costs shall be traced to a cost object to the extent economically feasible.
u) Where the repairs and maintenance cost is not directly traceable to cost object, it shall be assigned
based on either of the following the principles of (1) Cause and Effect - Cause is the process or
Guidance Note on Internal Audit of Telecommunication Industry Page 130
The Institute of Cost Accountants of India
operation or activity and effect is the incurrence of cost and (2) Benefits received – overheads are to
be apportioned to the various cost objects in proportion to the benefits received by them.
v) If the repairs and maintenance cost (including the share of the cost of reciprocal exchange of
services) is shared by several cost objects, the related cost shall be measured as an aggregate and
distributed among the cost objects.
g) If the contractual or other legal rights are conveyed for a limited term that can be renewed, the
useful life of the intangible asset shall include the renewal period(s) only if there is evidence to
support renewal by the entity without significant cost. The useful life of a re-acquired right
recognised as an intangible asset in a business combination is the remaining contractual period of
the contract in which the right was granted and shall not include renewal periods.
h) The useful life of an intangible asset, in any situation, shall not exceed 10 years from the date it is
available for use.
i) Depreciation shall be considered from the time when a depreciable asset is first put into use. An
asset which is used only when the need arises but is always held ready for use. Example: fire
extinguisher, stand by generator, safety equipment shall be considered to be an asset in use.
Depreciable assets will be considered to be put into use when commercial production of goods and
services commences.
j) Depreciation on an asset which is temporarily retired from production of goods and services shall be
considered as abnormal cost for the period when the asset is not in use.
k) Depreciation of any addition or extension to an existing depreciable asset which becomes an
integral part of that asset shall be based on the remaining useful life of that asset.
l) Depreciation of any addition or extension to an existing depreciable asset which retains a separate
identity and is capable of being used after the expiry of the useful life of that asset shall be based on
the estimated useful life of that addition or extension.
m) The impact of higher depreciation due to revaluation of assets shall not be assigned to cost object.
n) Impairment loss on assets shall be excluded from cost of production.
o) The method of depreciation used shall reflect the pattern in which the asset’s future economic
benefits are expected to be consumed by the entity.
p) An entity can use any of the methods of depreciation to assign depreciable amount of an asset on a
systematic basis over its useful life, viz., Straight-line method; Diminishing balance method; and
Units of production method.
q) The method of amortisation of intangible asset shall reflect the pattern in which the economic
benefits accrue to entity.
r) The methods and rates of depreciation applied shall be reviewed at least annually and, if there has
been a change in the expected pattern of consumption or loss of future economic benefits, the
method applied shall be changed to reflect the changed pattern.
s) Spares purchased specifically for a particular asset, or class of assets, and which would become
redundant if that asset or class of asset was retired or use of that asset was discontinued, shall form
part of that asset. The depreciable amount of such spares shall be allocated over the useful life of
the asset.
t) Cost of small assets shall be written off in the period in which they were purchased as per the
accounting policy of the entity.
u) Depreciation of an asset shall not be considered in case cumulative depreciation exceeds the
original cost of the asset, net of residual value.
v) Where depreciation for an addition of an asset is measured on the basis of the number of days for
which the asset was used for the preparation and presentation of financial statements, depreciation
of the asset for assigning to cost of object shall be measured in relation to the period, the asset
actually utilized.
w) Depreciation shall be traced to the cost object to the extent economically feasible.
x) Where the depreciation is not directly traceable to cost object, it shall be assigned based on either
of the following two principles, namely;
i) Cause and Effect - Cause is the process or operation or activity and effect is the incurrence
of cost and
ii) Benefits received – overheads are to be apportioned to the various cost objects in
proportion to the benefits received by them.
7. Overheads
a) Proper records shall be maintained for various items of indirect expenses comprising overheads
pertaining to goods or services under reference. These expenses shall be analysed, classified and
grouped according to functions.
b) Overheads representing procurement of resources shall be determined at invoice or agreed price
including duties and taxes, and other expenditure directly attributable thereto net of discounts
(other than cash discounts), taxes and duties refundable or to be credited.
c) Overheads other than those referred to above shall be determined on the basis of cost incurred in
connection therewith.
d) Any abnormal cost where it is material and quantifiable shall not form part of the overheads.
e) Finance costs incurred in connection with procured or self-generated resources shall not form part
of overheads.
f) Overheads shall not include imputed cost.
g) Overhead variances attributable to normal reasons shall be treated as part of overheads. Overhead
variances attributable to abnormal reasons shall be excluded from overheads.
h) Any subsidy or Grant or Incentive or amount of similar nature received or receivable with respect to
overheads shall be reduced for ascertainment of the cost of the cost object to which such amounts
are related.
i) Fines, penalties, damages and similar levies paid to statutory authorities or other third parties shall
not form part of the overheads.
j) Credits or recoveries relating to the overheads, material and quantifiable, shall be deducted from
the total overhead to arrive at the net overheads. Where the recovery exceeds the total overheads,
the balance recovery shall be treated as other income.
k) Any change in the cost accounting principles applied for the measurement of the overheads shall be
made only if, it is required by law or for compliance with the requirements of a cost accounting
standard, or a change would result in a more appropriate preparation or presentation of cost
statements of an entity.
l) While assigning overheads, traceability to a cost object in an economically feasible manner shall be
the guiding principle. The cost which can be traced directly to a cost object shall be directly
assigned.
m) Overheads shall be classified according to functions, viz., works, administration, selling &
distribution, head office, corporate etc.
n) Assignment of overheads to the cost objects shall be based on either of the following two principles;
(1) Cause and Effect - Cause is the process or operation or activity and effect is the incurrence of
cost and (2) Benefits received – overheads are to be apportioned to the various cost objects in
proportion to the benefits received by them.
o) The variable production overheads shall be absorbed to products or services based on actual
capacity utilisation.
p) The fixed production overheads shall be absorbed based on the normal capacity.
q) Assignment of Administration Overheads shall be in accordance with para no. 8.
r) Marketing Overheads that can be identified to a product or service shall be assigned to that product
or service.
s) Marketing Overheads that cannot be identified to a product or service shall be assigned to the
products or services on the most appropriate basis.
8. Administrative Overheads
a) Administrative overheads shall be the aggregate of cost of resources consumed in activities relating
to general management and administration of an organisation.
b) In case of leased assets, if the lease is an operating lease, the entire rentals shall be included in the
administrative overheads. If the lease is a financial lease, the finance cost portion shall be
segregated and treated as part of finance costs.
c) The cost of software (developed in house, purchased, licensed or customised), including up-
gradation cost shall be amortised over its estimated useful life.
d) The cost of administrative services procured from outside shall be determined at invoice or agreed
price including duties and taxes, and other expenditure directly attributable thereto net of discounts
(other than cash discount), taxes and duties refundable or to be credited.
e) Any Subsidy or Grant or Incentive or any amount of similar nature received or receivable with
respect to any Administrative overheads shall be reduced for ascertainment of the cost of the cost
object to which such amounts are related.
f) Administrative overheads shall not include any abnormal administrative cost.
g) Fines, penalties, damages and similar levies paid to statutory authorities or other third parties shall
not form part of the administrative overheads.
h) Credits or recoveries relating to the administrative overheads including those rendered without any
consideration, material and quantifiable, shall be deducted to arrive at the net administrative
overheads.
i) Any change in the cost accounting principles applied for the measurement of the administrative
overheads should be made only if it is required by law or for compliance with the requirements of a
cost accounting standard or a change would result in a more appropriate preparation or
presentation of cost statements of an organisation.
j) While assigning administrative overheads, traceability to a cost object in an economically feasible
manner shall be the guiding principle.
k) Assignment of administrative overheads to the cost objects shall be based on either of the following
two principles;
(i) Cause and Effect - Cause is the process or operation or activity and effect is the incurrence of
cost.
(ii) Benefits received – overheads are to be apportioned to the various cost objects in proportion to
the benefits received by them.
9. Transportation Cost
a) Proper records shall be maintained for recording the actual cost of transportation showing each
element of cost such as freight, cartage, transit insurance and others after adjustment for recovery
of transportation cost. Abnormal costs relating to transportation, if any, are to be identified and
recorded for exclusion of computation of average transportation cost.
b) In case of a manufacturer having his own transport fleet, proper records shall be maintained to
determine the actual operating cost of vehicles showing details of various elements of cost such as
salaries and wages of driver, cleaners and others, cost of fuel, lubricant grease, amortized cost of
tyres and battery, repairs and maintenance, depreciation of the vehicles, distance covered and trips
made, goods hauled and transported to the depot.
c) In case of hired transport charges incurred for despatch of goods, complete details shall be recorded
as to date of despatch, type of transport used, description of the goods, destination of buyer, name
of consignee, challan number, quantity of goods in terms of weight or volume, distance involved,
amount paid and other related details.
d) Records shall be maintained separately for inward and outward transportation cost specifying the
details particulars of goods despatched, name of supplier or recipient, amount of freight etc.
e) Separate records shall be maintained for identification of transportation cost towards inward
movement of material (procurement) and transportation cost of outward movement of goods
removed or sold for both home consumption and export.
f) Records for transportation cost from factory to depot and thereafter shall be maintained separately.
g) Records for transportation cost for carrying any material or product to job-workers place and back
shall be maintained separately so as include the same in the transaction value of the product.
h) Records for transportation cost for goods involved exclusively for trading activities shall be
maintained separately and the same shall not be included for claiming any deduction for calculating
assessable value excisable goods cleared for home consumption.
i) Records of transportation cost directly allocable to a particular category of products shall be
maintained separately so that allocation can be made.
j) For common transportation cost both for own fleet or hired ones, proper records for basis of
apportionment shall be maintained.
k) Records for transportation cost for exempted goods, excisable goods cleared for export shall be
maintained separately.
l) Separate records of cost for mode of transportation other than road like ship or air are to be
maintained, which shall be included in total cost of transportation.
m) Inward transportation costs shall form the part of the cost of procurement of materials which are to
be identified for proper allocation or apportionment to the materials or products.
n) Outward transportation cost shall form the part of the cost of sale and shall be allocated or
apportioned to the materials and goods on a suitable basis.
o) The following basis shall be used, in order of priority, for apportionment of outward transportation
cost depending upon the nature of products, unit of measurement followed and type of transport
used:
i) Weight
ii) Volume of goods
iii) Tonne-Km
iv) Unit or Equivalent unit
v) Value of goods
vi) Percentage of usage of space
p) Once a basis of apportionment is adopted, the same shall be followed consistently.
q) For determining the transportation cost per unit, distance shall be factored in to arrive at weighted
average cost.
r) Abnormal and non-recurring cost shall not be a part of transportation cost.
f) Credits or recoveries relating to the amount Royalty and Technical Know-how fee, material and
quantifiable, shall be deducted to arrive at the net amount of Royalty and Technical Know-how fee.
g) Any change in the cost accounting principles applied for the measurement of the amount of Royalty
and Technical Know-how Fee should be made only if, it is required by law or for compliance with the
requirements of a cost accounting standard, or a change would result in a more appropriate
preparation or presentation of cost statements of an organisation.
h) Royalty and Technical Know-how fee that is directly traceable to a cost object shall be assigned to
that cost object. In case such fee is not directly traceable to a cost object then it shall be assigned on
any of the following basis:
i) Units produced
ii) Units sold
iii) Sales value
i) The amount of Royalty fee paid for mining rights shall form part of the cost of material.
j) The amount of Royalty and Technical Know-how fee shall be assigned on the nature or purpose of
such fee. The amount of royalty and technical know-how fee related to product or process know
how shall be treated as cost of production; if it is related to trademarks or brands shall be treated as
cost of sales.
(1) Cause and Effect - Cause is the process or operation or activity and effect is the incurrence of
cost and
(2) Benefits received – overheads are to be apportioned to the various cost objects in proportion to
the benefits received by them.
i) Cost of Pollution Control activity carried out by outside contractors inside the entity shall include
charges payable to the contractor and cost of materials, consumable stores, spares, manpower,
equipment usage, utilities, and other costs incurred by the entity for such jobs.
j) Cost of Pollution Control jobs carried out by contractor at its premises shall be determined at invoice
or agreed price including duties and taxes, and other expenditure directly attributable thereto net of
discounts (other than cash discount), taxes and duties refundable or to be credited. This cost shall
also include the cost of other resources provided to the contractors.
k) Cost of Pollution Control jobs carried out by outside contractors shall include charges made by the
contractor and cost of own materials, consumable stores, spares, manpower, equipment usage,
utilities and other costs used in such jobs.
l) Each type of Pollution Control e.g. water, air, soil pollution shall be treated as a distinct activity, if
material and identifiable.
m) Finance costs incurred in connection with the Pollution Control activities shall not form part of
Pollution Control costs.
n) Pollution Control costs shall not include imputed costs.
o) Price variances related to Pollution Control, where standard costs are in use, shall be treated as part
of Pollution Control cost. The portion of usage variances attributable to normal reasons shall be
treated as part of Pollution Control cost. Usage variances attributable to abnormal reasons shall be
excluded from Pollution Control cost.
p) Subsidy or Grant or Incentive or amount of similar nature received or receivable with respect to
Pollution Control activity, if any, shall be reduced for ascertainment of the cost of the cost object to
which such amounts are related.
q) Any Pollution Control cost resulting from abnormal circumstances, if material and quantifiable, shall
not form part of the Pollution Control cost.
r) Fines, penalties, damages and similar levies paid to statutory authorities or other third parties shall
not form part of the Pollution Control cost.
s) Credits or recoveries relating to the Pollution Control activity, material and quantifiable, shall be
deducted to arrive at the net Pollution Control cost.
t) Research and development cost to develop new process, new products or use of new materials to
avoid or mitigate pollution shall be treated as research and development costs and not included
under pollution control costs. Development costs incurred for commercial development of such
product, process or material shall be included in pollution control costs.
u) Any change in the cost accounting principles applied for the measurement of the Pollution Control
cost should be made only if, it is required by law or for compliance with the requirements of a cost
Guidance Note on Internal Audit of Telecommunication Industry Page 142
The Institute of Cost Accountants of India
h) Cost of services for the purpose of inter unit transfers shall also include distribution costs incurred
for such transfers.
i) Cost of services for the purpose of inter-company transfers shall also include distribution cost
incurred for such transfers and administrative overheads.
j) Cost of services rendered to outside parties shall also include distribution cost incurred for such
transfers, administrative overheads and marketing overheads.
k) Finance costs incurred in connection with the Service Cost Centre shall not form part of the cost of
Service Cost Centre.
l) The cost of service cost centre shall not include imputed costs.
m) Where the cost of service cost centre is accounted at standard cost, the price and usage variances
related to the services cost Centre shall be treated as part of cost of services. Usage variances due to
abnormal reasons shall be treated as part of abnormal cost.
n) Any Subsidy or Grant or Incentive or any such payment received or receivable with respect to any
service cost centre shall be reduced for ascertainment of the cost to which such amounts are
related.
o) The cost of production and distribution of the service shall be determined based on the normal
capacity or actual capacity utilization whichever is higher and unabsorbed cost, if any, shall be
treated as abnormal cost. Cost of a Stand-by service shall include the committed costs of
maintaining such a facility for the service.
p) Any abnormal cost where it is material and quantifiable shall not form part of the cost of the service
cost centre.
q) Penalties, damages paid to statutory authorities or other third parties shall not form part of the cost
of the service cost centre.
r) Credits or recoveries relating to the service cost centre including charges for services rendered to
outside parties, material and quantifiable, shall be reduced from the total cost of that service cost
centre.
s) Any change in the cost accounting principles applied for the measurement of the cost of Service
Cost Centre shall be made, only if it is required by law or for compliance with the requirements of a
cost accounting standard, or a change would result in a more appropriate preparation or
presentation of cost statements of an enterprise.
t) While assigning cost of services, traceability to a cost object in an economically feasible manner shall
be the guiding principle.
u) Where the cost of services rendered by a service cost centre is not directly traceable to a cost
object, it shall be assigned on the most appropriate basis.
v) The most appropriate basis of distribution of cost of a service cost centre to the cost centres
consuming services is to be derived from logical parameters which could be related to the usage of
the service rendered. The parameter shall be equitable, reasonable and consistent.
e) Subsidy or Grant or Incentive or amount of similar nature received or receivable with respect to
Interest and Financing Charges, if any, shall be reduced to ascertain the net interest and financing
charges.
f) Penal Interest for delayed payment, Fines, penalties, damages and similar levies paid to statutory
authorities or other third parties shall not form part of the Interest and Financing Charges. In case
the company delays the payment of Statutory dues beyond the stipulated date, interest paid for
delayed payment shall not be treated as penal interest.
g) Interest paid for or received on investment shall not form part of the other financing charges for
production of goods or operations or services rendered;
h) Assignment of Interest and Financing Charges to the cost objects shall be based on either of the
following two principles, namely;
(1) Cause and Effect - Cause is the process or operation or activity and effect is the incurrence of
cost and
(2) Benefits received – to be apportioned to the various cost objects in proportion to the benefits
received by them.
a) Capacity shall be determined in terms of units of production or equivalent machine or man hours.
b) Installed capacity is determined based on:
i) Manufacturers’ Technical specifications
ii) Capacities of individual or interrelated production centres.
iii) Operational constraints or capacity of critical machines or
iv) Number of shifts
c) In case manufacturers’ technical specifications are not available, the estimates by technical experts
on capacity under ideal conditions shall be considered for determination of installed capacity. In
case any production facility is added or discarded the installed capacity shall be reassessed from the
date of such addition or discard. In case the same is reassessed as per direction of the Government,
it shall be in accordance with the principles laid down in the said directives. In case of improvement
in the production process, the installed capacity shall be reassessed from the date of such
improvement.
d) Normal capacity shall be determined vis-a-vis installed capacity after carrying out following
adjustments:
i) Holidays, normal shut down days and normal idle time,
ii) Normal time lost in batch change over,
iii) Time lost due to preventive maintenance and normal break downs of equipment,
iv) Loss in efficiency due to ageing of the equipment, or
v) Number of shifts.
e) Capacity utilization is actual production measured as a percentage of installed capacity.
raw material, process materials, packing materials, consumables, stores, machinery spares,
chemicals, fuels, finished goods and fixed assets etc. Reasons for shortages or surplus arising out of
such verifications and the method followed for adjusting the same in the cost of the goods or
services shall be indicated in the records.
References
1. http://en.wikipedia.org/wiki/Internal_Audit#cite_note-6
2. http://www.qfinance.com/auditing-best-practice/aligning-the-internal-audit-function-
with-strategic-objectives?page=1
3. http://www.qfinance.com/auditing-best-practice/aligning-the-internal-audit-function-
with-strategic-objectives?page=1
4. www.trai.gov.in
5. www.dot.gov.in
6. KPMG Internal_audit_role
7. http://usf.usfca.edu/internalaudit/pdf/USF_%20IAManual.pdf
8. http://www.iia.org.uk/about-us/what-is-internal-audit
9. http://www.theiia.org/guidance/standards-and-guidance/ippf/definition-of-internal-
auditing/?search%C2%BCdefinition
10. http://www.audit.cornell.edu/faq.html#internal_auditors
11. http://www.metricstream.com/insights/bestpractices_intaudit.htm
12. http://www.ehow.com/how_6565214_design-audit-
checklist.html?ref=Track2&utm_source =ask -
13. http://www.tnd.bsnl.co.in/currentnews/news/HAND_BOOK_ON_BCCS_IN_GSM_KS_KRI
SHNAN_SDETRICHY1.pdf
*****************************************************