NFRA vs ICAI: Who Actually Regulates Your Audit

For nearly seventy years, a chartered accountant in India answered to one body. ICAI set the entry standard, wrote the professional standards, and disciplined members who fell short of them. That single-regulator arrangement ended in 2018, when the National Financial Reporting Authority was constituted under Section 132 of the Companies Act, 2013. Since then the answer to who regulates your audit depends entirely on who your client is, and a firm auditing across the size spectrum operates under two regimes at once.

Why NFRA Exists

The case for an independent audit regulator is the same everywhere it has been made: a profession that disciplines itself has an inherent conflict when the failure is large and public. India's version of that argument was sharpened by a series of corporate collapses in which the audit was, at minimum, uncomfortable to defend, and by the international pattern of jurisdictions moving oversight of public-interest audits away from professional bodies to statutory regulators. NFRA is India's answer, and its remit is deliberately narrower than ICAI's: it does not train, admit, or license chartered accountants, and it takes no interest in the vast majority of audits. It concerns itself with the audits where public money and public confidence are most exposed.

Where the Line Falls

NFRA's jurisdiction is defined by class of entity rather than by size of firm. Broadly, it covers listed companies, unlisted public companies above prescribed thresholds of paid-up capital, turnover, or outstanding loans and debentures, banking companies, insurance companies, companies governed by electricity legislation, and certain bodies specified by the central government, along with the auditors of those entities. ICAI retains its authority over every other audit and over the profession as a whole. Because the thresholds are prescribed by rule and have been amended, the exact cut-offs for unlisted public companies are worth confirming against the current NFRA Rules rather than carried forward from memory.

What NFRA Can Do That Is Genuinely New

Two of NFRA's powers changed the practical risk of auditing a large company. The first is debarment: NFRA can bar an individual or a firm from undertaking audits of companies or bodies corporate for a period of years. For a firm whose practice is built on large-company audit, that is an existential sanction rather than a fine. The second is the audit quality inspection, in which NFRA examines the working papers of selected engagements and publishes a report on what it found. These reports are public, name the firm, and describe deficiencies in detail. Nothing in the earlier regime exposed a firm's file quality to public description in that way, and it has driven considerable investment in documentation among the firms subject to it.

The Disagreement Between the Two

The relationship has not been smooth, and a practitioner is better served knowing that than assuming a settled division of labour. The two bodies have publicly disagreed over the standard-setting process, including on the extent to which NFRA's recommendations should displace standards developed through ICAI's own boards, and over proposals affecting audits of subsidiaries and group entities. There has also been friction over overlapping disciplinary jurisdiction where a member's conduct touches both covered and uncovered entities. None of this changes what a member must do on a given engagement, but it does mean that the framework is still moving, and that a position taken from a two-year-old article may no longer describe the current arrangement.

What This Means for a Practising Member

• Identify, for each audit client, which regime applies. The answer follows the client's class, not your firm's size.
• For NFRA-covered clients, assume the file may be inspected and read as a public document, because it may become one.
• Documentation standards on covered engagements should be set by what an external inspector would need to reconstruct your reasoning, not by what your own review process is used to accepting.
• Being subject to ICAI peer review says nothing about NFRA inspection, and satisfying one does not discharge the other.
• Track amendments to the NFRA Rules rather than the founding provisions, since coverage thresholds have been the moving part.

For the large majority of practices, whose clients are private companies, firms, and individuals, NFRA remains something that happens to other people. That is by design. But the direction of travel in every jurisdiction that has created an independent audit regulator has been for its perimeter to widen rather than narrow, and a firm growing towards larger public clients does well to build the documentation habits before the jurisdiction arrives rather than after.