ICAI: Guidance note on CARO,2020

ICAI: Guidance Note on CARO, 2020

CARO 2020 requires the statutory auditor of most Indian companies to report on 21 specific matters — from title deeds of immovable properties to whistle-blower complaints and going-concern indicators. The ICAI Guidance Note, issued by its Auditing and Assurance Standards Board (AASB), translates each clause into concrete audit procedures, illustrative report language, and documentation benchmarks. If you are signing off a FY 2025-26 audit report right now or planning your FY 2026-27 engagement programme, this article tells you exactly what the Order demands and where auditors most commonly fall short.

What Is CARO 2020 and Why Does It Still Demand Your Full Attention?

The Companies (Auditor's Report) Order, 2020 was notified by the Ministry of Corporate Affairs (MCA) under Section 143(11) of the Companies Act 2013. It replaced CARO 2016 and applied for the first time to audit reports covering FY 2021-22 — though it was originally intended for FY 2019-20 before COVID-related deferrals.

CARO 2020 added several new reporting obligations that had no precedent in CARO 2016:

• Benami property disclosures under the Benami Transactions (Prohibition) Act 1988
• Whistle-blower complaints received during the year
• Resignation of the statutory auditor and whether reasons were properly disclosed via Form ADT-3 on the MCA V3 portal
• Diversion of short-term funds into long-term investments in subsidiaries, associates, and joint ventures
• Unspent CSR amounts and their treatment in the accounts
• Qualifications in subsidiary/associate auditor reports — disclosed in the consolidated CARO annexure

CARO 2020 is not a standalone certificate. It is an annexure to the main audit report issued under SA 700 (Forming an Opinion and Reporting on Financial Statements). Regulators, lenders, and the National Financial Reporting Authority (NFRA) treat it as a primary source of independent verification. A boilerplate CARO report — with identical stock paragraphs year on year — is now a quality-review red flag. NFRA enforcement orders have cited superficial CARO reporting as a basis for adverse findings, and that enforcement posture has only strengthened entering FY 2026-27.

Who Must Comply? Applicability and Exemptions

CARO 2020 applies to all companies including foreign companies as defined under Section 2(42) of the Companies Act 2013 — except the following categories:

• Banking companies regulated under the Banking Regulation Act 1949
• Insurance companies regulated by IRDAI
• Section 8 companies (companies licensed under Section 8 of the Companies Act 2013)
• One Person Companies (OPCs)
• Small private companies satisfying all four of these conditions simultaneously:
• Paid-up share capital ≤ Rs. 1 crore
• Turnover ≤ Rs. 10 crore
• Borrowings from banks or financial institutions ≤ Rs. 1 crore at any point during the year
• No public interest deposits outstanding

Critical nuance on the small private company test: All four conditions must be satisfied concurrently. A private company with a turnover of Rs. 8 crore but a cash-credit facility of Rs. 1.2 crore from a scheduled commercial bank does not qualify for exemption. Document the threshold verification with actual figures extracted from the trial balance and sanction letters — not from the prior year's working papers.

Consolidated financial statements: CARO 2020 applies to consolidated accounts only with respect to Clause (xxi) — qualifications or adverse remarks in component auditors' reports. All other clauses are reported in the standalone audit report.

Foreign branches of Indian companies: The auditor of a branch must issue a CARO report for that branch if it falls within the Order's applicability, consistent with the branch audit report requirements under Section 143(8).

The 21 Clauses: A Deep Dive into the High-Impact Reporting Areas

Rather than listing all 21 clauses mechanically, the following sections focus on the clauses that generate the greatest audit complexity and the most common reporting deficiencies in practice.

Clause (i): Property, Plant and Equipment and Intangible Assets

Four distinct sub-requirements sit within this clause:

1. Whether physical verification of fixed assets was conducted at reasonable intervals and discrepancies dealt with in the books
2. Whether title deeds of all immovable properties (other than properties where the company is the lessee under a registered lease) are held in the name of the company — and if not, the nature of the document, the name of the person holding title, and the reason
3. Whether any revaluation was carried out during the year — if yes, whether done by a registered valuer under the Companies Act 2013, and the impact on the carrying value
4. Whether any proceedings under the Benami Transactions (Prohibition) Act 1988 have been initiated or are pending against the company for holding any benami property

The title deed verification is the most commonly deficient area. Older manufacturing companies often hold property in the name of a erstwhile proprietor, a partnership firm, or a deceased director. The ICAI Guidance Note is clear: management representation alone is insufficient corroboration. You must obtain — or physically inspect — the registered sale deed, latest property tax receipt, and mutation records. Where the title is not in the company's name, the CARO annexure must state this explicitly, not paper over it.

Clause (ii): Inventory and Working Capital Limits

Three layers of reporting:

1. Whether management conducted physical verification at reasonable intervals and whether discrepancies of 10% or more in aggregate for each class of inventory were material and were dealt with in the books
2. If the company has been sanctioned working capital limits in excess of Rs. 5 crore in aggregate from banks or financial institutions — whether quarterly returns or statements of current assets filed with lenders are in agreement with the books of account
3. If discrepancies exist, the nature and details of those discrepancies

The Rs. 5 crore threshold applies to the aggregate limit across all lenders, not per bank. A company with a Rs. 3 crore cash credit from Bank A and a Rs. 2.5 crore overdraft from Bank B has an aggregate limit of Rs. 5.5 crore and falls within Clause (ii)(b). Stock statements submitted to the bank must match the inventory ledger. A timing difference between dispatch and recording does not absolve the auditor — the discrepancy must be explained and documented.

Clause (iii): Loans, Advances, Guarantees, and Investments

This clause applies when the company itself has granted loans, advances in the nature of loans, provided guarantees, or made investments. It is particularly active for holding companies and promoter-linked entities.

Sub-clause (iii)(f) requires the auditor to report whether any loan or advance in the nature of a loan is repayable on demand or without specifying any terms. If yes, the proportion such loans represent of total loans and advances in the nature of loans must be stated. This sub-clause targets disguised advances to promoters structured as "inter-corporate loans repayable on demand" to circumvent the scrutiny of scheduled repayments.

Clause (vii): Statutory Dues

The auditor must confirm whether the company is regular in depositing undisputed statutory dues — Provident Fund (PF), ESI, Income Tax (TDS/advance tax), Goods and Services Tax (GST), Customs Duty, and any material cess — to the appropriate authorities.

Where undisputed amounts remain outstanding for more than six months from the due date as at the balance sheet date, the amounts must be stated with the nature of the dues and the authority to whom payable.

Additionally, all disputed statutory dues pending before various authorities (Commissioner Appeals, ITAT, High Court, Supreme Court) must be disclosed with the amount, nature of dispute, and forum.

Clause (xv): Resignation of Statutory Auditor

New in CARO 2020. The auditor must report whether the statutory auditor has resigned during the year and, if so, whether issues, objections, or concerns raised by the outgoing auditor have been addressed. Form ADT-3, filed on the MCA V3 portal, is the document that captures the outgoing auditor's reasons.

As the incoming auditor, you must obtain and evaluate the ADT-3. If the predecessor flagged unresolved issues — unsupported entries, management override, or limitations in scope — those must feed into your risk assessment, not be set aside as the prior auditor's problem.

Clause (xvi): Going Concern

The auditor must report whether, based on financial ratios, ageing and expected realization of financial assets, expected payment of financial liabilities, and other information, any material uncertainty exists that may cast doubt on the company's ability to continue as a going concern. If material uncertainty exists, the auditor must state the basis of the conclusion.

This clause is operationally linked to SA 570 (Going Concern) but goes further by explicitly requiring ratio-based and ageing-based analysis. Working papers for Clause (xvi) must show: current ratio trend, debt-service coverage ratio (DSCR), net worth trend, overdue creditor ageing, and cash flow projections. A sign-off without these is indefensible at quality review.

Clause (xxi): Subsidiary and Associate Auditor Qualifications

Reported only in the consolidated audit report. The group auditor must state whether the auditors of any subsidiary, associate, or joint venture incorporated in India have issued qualified, adverse, or disclaimer opinions. If yes, the details — company name, nature of qualification — must be included.

This drives group audit communication. You must formally request and receive component auditor reports before signing the consolidated CARO annexure. If a subsidiary's auditor has issued an emphasis of matter paragraph on going concern, that must appear in the consolidated CARO report under Clause (xxi) even if the parent group appears financially sound.

What the ICAI Guidance Note Actually Does for You

The ICAI's Guidance Note on CARO 2020 (issued by the AASB) is structured clause by clause and provides five practical building blocks:

1. Plain-English interpretation of ambiguous phrases — for instance, "reasonable intervals" for physical verification is interpreted as at least annually for most categories of fixed assets, and more frequently for assets with high movement risk such as vehicles and portable equipment

1. Illustrative audit procedures — for title deeds: obtain property register → extract each entry → cross-match to registered title document → flag mismatches → obtain management representation covering flagged items

1. Sample report language — affirmative, qualified, and adverse versions for every clause, so your report wording is calibrated to the actual finding rather than defaulting to a generic sentence

1. Working paper checklists — clause-wise sign-off sheets structured to satisfy peer review and ICAI quality control inspections under the Chartered Accountants Act 1949

1. Cross-referencing to Schedule III — the Guidance Note maps each CARO clause to the corresponding disclosure required in the financial statements (for example, Clause (vii) disputed dues maps to the contingent liabilities note; Clause (xvi) maps to the going-concern note), enabling you to check both simultaneously and catch inconsistencies before sign-off

The Guidance Note is explicit on one point: a CARO report is evidence-based, not declaration-based. "In our opinion, the company maintains proper records" carries legal weight only when backed by working papers that demonstrate you actually examined those records.

Building Your CARO 2020 Audit Programme: Step-by-Step

Follow this eight-step sequence at the start of every engagement:

1. Run the applicability test — verify paid-up capital, turnover, aggregate borrowings, and deposits against actual figures. Document the threshold conclusion formally.
2. Build a CARO 2020 lead sheet — one master working paper listing all 21 clauses with columns for: planned procedure, working-paper cross-reference, draft report language, and sign-off.
3. Map clauses to audit risk — for a manufacturing company, Clauses (i), (ii), (iii), and (vii) typically carry the highest misstatement risk. Allocate senior team time proportionately.
4. Schedule physical observations early — title deed inspection and inventory attendance cannot be compressed into the last week before sign-off. Plan them two to three months before the reporting date.
5. Obtain CARO-specific management representations — your standard representation letter should include confirmations on: title deeds held, whistle-blower complaints received (or nil), whistle-blower mechanism existence, CSR unspent amounts, and material disputes outstanding.
6. Draft clause by clause — use the ICAI Guidance Note's illustrative language as a starting template, then customise to actual findings. Do not use "Not applicable" as a default; document why a clause does not apply.
7. Cross-check CARO with Schedule III — every figure and finding in the CARO annexure must tie to or be consistent with the corresponding note in the financial statements.
8. Conduct a quality review before sign-off — a second partner or experienced manager should read the entire CARO annexure against the working papers independently before the report is signed.

Worked Example: Clauses (ii) and (vii) in a Mid-Sized Manufacturer

Company profile: Private limited company manufacturing industrial components. Turnover Rs. 28 crore. Cash credit limit of Rs. 7 crore from State Bank of India. FY 2025-26.

Clause (ii) — Stock Statement Reconciliation

The company files quarterly stock statements (QSST) with SBI. Your team reconciles the Q4 statement (submitted 15 April 2026 for position as at 31 March 2026) against the inventory ledger:

The aggregate overstatement is Rs. 28 lakh — the company has been inflating drawing power on its cash credit. Your Clause (ii) report must disclose this quantified discrepancy. Saying "we are informed that quarterly returns are in agreement with books" when your own reconciliation shows a Rs. 28 lakh gap is a reporting failure.

Clause (vii) — GST Arrears Outstanding Over Six Months

The client has undisputed Integrated GST (IGST) of Rs. 18,40,000 outstanding since October 2025 — over six months as at 31 March 2026. Your report must state this explicitly with the amount and authority.

Beyond CARO reporting, note the financial statements impact: interest under Section 50 of the CGST Act 2017 accrues at 18% per annum on the delayed amount. Approximate interest on Rs. 18,40,000 for 180 days: Rs. 18,40,000 × 18% × 180 ÷ 365 = Rs. 1,63,397. If this interest liability is not accrued in the books, that is an additional misstatement you must address in the main audit report — it will not surface automatically from the CARO exercise alone.

Common Mistakes and Pitfalls to Avoid

1. Treating CARO as a declaration, not an assurance exercise. Standard phrases repeated without working-paper support invite quality-review observations and NFRA scrutiny.

2. Missing the Rs. 5 crore aggregate threshold for Clause (ii). Verify the aggregate sanctioned limit across all lenders — not per bank — from sanction letters or credit appraisal reports.

3. Relying solely on management confirmation for title deeds. The ICAI Guidance Note requires actual documentary evidence — the registered sale deed, mutation records, or a qualified legal opinion with supporting documents.

4. Generic going-concern sign-off without ratio analysis. Clause (xvi) sign-off without documented current ratio trend, DSCR, and creditor ageing in the working papers is a clean audit opinion built on an unstable evidential foundation.

5. Omitting the whistle-blower sub-clause (xi)(b). Clauses (xi)(a) and (xi)(b) are separate reporting requirements. Auditors frequently address fraud but leave the whistle-blower complaint clause unmarked. Both must be addressed distinctly.

6. Contradiction between CARO and Schedule III. If Clause (vii) discloses Rs. 18 lakh in disputed GST pending before the Appellate Authority, the contingent liabilities note must carry a consistent or corroborating disclosure. Contradictions between the annexure and the notes destroy credibility and are a quality-control failure.

7. Ignoring ADT-3 filings on incoming engagements. If a predecessor auditor cited concerns on resignation — unresolved entries, scope limitations — those concerns must drive your risk assessment for Clause (xv) and influence your overall audit approach.

Key Takeaways

• CARO 2020 applies to all companies except banking, insurance, Section 8, OPCs, and small private companies satisfying all four prescribed thresholds simultaneously — verify with actual FY 2025-26 figures, not prior-year assumptions.
• 21 reporting items (several with sub-clauses) require substantive audit evidence for each; management representations alone are not sufficient corroboration for any clause.
• Title deed verification, stock statement reconciliation, statutory dues ageing, and going-concern ratio analysis generate the highest proportion of adverse CARO comments and quality-review findings — allocate your best resources here.
• The ICAI Guidance Note is the operational manual: use it for illustrative report language, working paper structure, and documentation standards; it is not optional reading for any statutory auditor covered by the Order.
• CARO and Schedule III disclosures must be mutually consistent — contradictions between the annexure and financial statement notes are a red flag for NFRA reviewers and peer inspectors alike.
• Draft each clause individually from working paper findings; document reasons for any "not applicable" conclusion; never use a blanket standard paragraph across all clauses without evidential linkage.
• Start CARO planning at engagement acceptance — title deed inspection, inventory attendance, and group-auditor communication for Clause (xxi) all require lead time that cannot be recovered in the final week before sign-off.