In this guide · 7 sections
- An ICAI Disciplinary Committee held a statutory auditor of a private company guilty under Clause (7) of Part I of the Second Schedule — not exercising due diligence / gross negligence.
- The punishment: reprimand, a fine of ₹1,00,000 and removal of the member's name from the Register for three months (order dated 5 February 2026).
- The auditor blamed a junior staff member. The Committee said he "cannot be allowed to shift his statutory obligations to a junior staff in his office."
- He also could not produce his audit records, saying the data was tampered with and deleted. The Committee: the auditor "cannot solely rely on the client's data systems" and must keep his own copies and working papers.
- The lapses were checkable before signing the report or certifying the AOC-4: missing Notes to Accounts, unsigned statements, no UDIN, Reserves & Surplus not agreeing with the year's profit, and a wrong net worth in AOC-4.
Try SignReady: FinalCheck lists the ties that do not agree, before you sign.
Start freeEvery CA firm runs on staff. Articles and assistants prepare the trial balance, the notes and the forms; the partner reviews and signs. A recent ICAI Disciplinary Committee order is a reminder of what that division of work does not change: when something goes wrong, the question is not who prepared the file, but who signed it.
This is the first article in our series Real orders, real lessons. We describe what the order says, without naming the member, and what a small firm can take from it.
The case in brief
| Item | From the order |
|---|---|
| Forum | ICAI Disciplinary Committee (Bench I, 2025-26), under section 21B of the Chartered Accountants Act, 1949 — read the order (PDF) |
| Who complained | The resolution professional of the audited company, after the company went into insolvency proceedings over an unpaid loan |
| Engagement | Statutory audit of a private company for FY 2018-19 and FY 2019-20; the member also certified the company's e-form AOC-4 |
| Charge | Clause (7) of Part I of the Second Schedule: "does not exercise due diligence, or is grossly negligent in the conduct of his professional duties" |
| Findings | Guilty on both allegations (findings dated 22 December 2025) |
| Punishment | Reprimand, fine of ₹1,00,000 payable within 60 days, and removal of name from the Register of Members for 3 months (order dated 5 February 2026) |
What the Committee found
The complaint pointed to the financial statements and AOC-4 filed on the MCA portal. The Committee examined the records and noted:
- Notes to Accounts missing — for both years. The Committee called the notes "an integral part of financial statements".
- Statements unsigned — the FY 2019-20 financial statements attached to AOC-4 had no signatures of the directors or the auditor.
- No UDIN — the FY 2019-20 audit report, signed on 9 December 2020, did not carry a UDIN, though quoting it had become mandatory from 1 July 2019.
- Reserves & Surplus did not agree with the year's profit — the FY 2019-20 figure in the Balance Sheet was wrongly calculated and did not match the Profit and Loss Account.
- Wrong net worth in AOC-4 — an incorrect net worth figure in the e-form the member certified.
- No audit records — the member could not justify the figures or produce the documents he had relied on.
The defences, and why they failed
| What the member said | What the Committee noted or held |
|---|---|
| A junior staff member handled the drafting under his supervision; her services were terminated when the errors were found | Blaming junior staff "does not absolve" the auditor: the final responsibility for accuracy, completeness and compliance of the audit report and certification "rests entirely" with him. He "cannot be allowed to shift his statutory obligations to a junior staff in his office" — and by attributing the irregularities to his staff he had indirectly accepted them. |
| The lapses were technical and clerical, with no mala fide intent and no loss to anyone | Not accepted. After considering his written submissions on the findings, the Committee kept the finding of guilt under Clause (7) (the order calls it Item (7)) and imposed a reprimand, a fine and removal for three months. |
| Signed statements existed in his office; the client's ROC consultant uploaded the unsigned version, and the client's staff did the AOC-4 data entry | The AOC-4 for both years was certified by the member, and the irregularities were in what he certified. |
| The client's data was tampered with and deleted from his system, so he could not reply | An auditor must obtain and retain sufficient appropriate evidence. He "cannot solely rely on the client's data systems" and must "maintain independent copies, extracts, and audit working papers". Loss of the data shows "gross negligence and lack of due professional care". |
Five lessons for a small firm
1. Delegate the work, not the responsibility
Staff can draft the notes, prepare the AOC-4 and fill in the figures. The partner's review has to cover what goes out in the partner's name — including e-forms the partner certifies. Make the final pack (statements, notes, report, AOC-4 figures) one thing the partner looks at together.
2. Tie the statements before you sign
Two of the findings are the kind a tie-out catches: Reserves & Surplus that did not agree with the year's profit, and an incorrect net worth figure in AOC-4. A short tie-out catches both — see 7 checks before signing a balance sheet and Reserves and Surplus under Schedule III.
3. Check that what is filed is what you signed
The member said signed statements existed in his office but the unsigned version was uploaded. Before certifying an e-form, compare the attachment with the signed set: notes attached, signatures present, dates matching the report, UDIN shown.
4. Generate the UDIN at signing
Generate the UDIN when you sign and quote it on the report, within ICAI's time limit (currently 60 days from signing). Here the member said a UDIN had been generated but did not show in the uploaded PDF "due to formatting issues" — the report as filed still had none. Check that it appears on what is filed, not only on the portal.
5. Keep your own file — the client's system is not your file
The most important line in the order is about records. The working papers are the auditor's, they must be kept by the auditor, and "the data was deleted" is not a defence. SA 230 and SQC 1 expect the file to be assembled ordinarily within 60 days of the report and kept for ordinarily at least seven years — see Audit working papers (SA 230).
A two-minute check before the partner signs
- Notes to Accounts complete and attached to the statements that will be filed.
- Every note total agrees with the face of the Balance Sheet and the Statement of Profit and Loss.
- Opening Reserves & Surplus + profit for the year ± other movements = closing Reserves & Surplus.
- Net worth and turnover in AOC-4 agree with the audited statements.
- Statements signed by the directors and the auditor; dates consistent with the audit report.
- UDIN generated and quoted on the report.
- Working papers and the client's trial balance saved in the firm's own file, not only on the client's system.
None of this is new. The point of the order is that blaming the staff, or the client's lost data, did not help when it was missing.
Try SignReady: Your own copy of the TB, workings, queries and sign-off for every client.
Start freeFrequently asked questions
Can a CA be punished for mistakes made by his staff?
Yes. In this order the ICAI Disciplinary Committee held that attributing errors to junior staff does not absolve the auditor, because the final responsibility for the accuracy, completeness and compliance of the audit report and certification rests with the member who signs.
What punishment did the ICAI Disciplinary Committee give in this case?
A reprimand, a fine of ₹1,00,000 payable within 60 days, and removal of the member's name from the Register of Members for three months, under section 21B(3) of the Chartered Accountants Act, 1949 (order dated 5 February 2026).
What is Clause (7) of Part I of the Second Schedule?
A chartered accountant in practice is deemed guilty of professional misconduct if he "does not exercise due diligence, or is grossly negligent in the conduct of his professional duties". It is commonly invoked in audit-lapse cases.
Is "the client's data was deleted" a defence for missing working papers?
No. The Committee held that an auditor cannot solely rely on the client's data systems and must keep independent copies, extracts and audit working papers; their loss showed gross negligence.
Who can file a complaint against an auditor with ICAI?
Anyone can — a complaint is filed in Form I with a fee, and information about misconduct can also be given without one, including by regulators, banks and lenders. In this case the complaint came from the resolution professional appointed when the audited company went into insolvency proceedings.
Sources
- ICAI Disciplinary Committee — findings (22.12.2025) and order (05.02.2026), case PR/196/2022/DD/263/2022/DC/1931/2024 (PDF)
- ICAI Disciplinary Committee — all orders for the Council year 2025-26
- Chartered Accountants Act, 1949 — Second Schedule, Part I, Clause (7)
- ICAI — SA 230 Audit Documentation
- ICAI — UDIN: time limit aligned to 60 days
SignReady keeps the trial balances, working papers, client queries with replies and the partner's sign-off for each finalisation in the firm's own account, and puts them in one download for the file. First 3 finalisations free.
Audit and accounts updates, practical tips and knowledge: join the Audit and Accounts Update group on WhatsApp.
Version history: 13 Oct 2026 — first published. 13 Oct 2026 — written from the ICAI Disciplinary Committee findings (22 Dec 2025) and order (5 Feb 2026) in case PR/196/2022/DD/263/2022/DC/1931/2024. First in the series "Real orders, real lessons".
