Maintaining financial accuracy, transparency, and accountability is essential for businesses operating in India. Companies must establish appropriate systems to ensure that financial transactions are properly recorded, assets are protected, and financial statements reflect the organisation's financial position accurately. Internal financial controls play an important role in achieving these objectives.

The Companies Act, 2013 establishes specific responsibilities for directors and statutory auditors concerning internal financial controls. These requirements help improve corporate governance, strengthen financial reporting, and reduce the risk of errors and financial irregularities.

Internal Financial Control Under the Companies Act, 2013 is an important compliance consideration for businesses, particularly listed companies and entities subject to statutory auditor reporting requirements. Understanding the relevant provisions helps companies determine their responsibilities and establish suitable control procedures.

What Is Internal Financial Control?

Internal financial control refers to the policies, procedures, and systems established by a company to provide reasonable assurance regarding the reliability of financial reporting, the proper recording of transactions, and the prevention or detection of material errors and irregularities.

These controls may include approval procedures, bank reconciliations, segregation of duties, accounting system access restrictions, verification of supporting documents, and regular financial reviews.

For example, a company may require separate employees to approve supplier invoices, process payments, and reconcile bank accounts. This arrangement reduces the possibility of unauthorised transactions and helps identify discrepancies.

An effective control framework should reflect the company's business activities, financial risks, size, and applicable legal requirements.

Key Provisions of the Companies Act, 2013

Several provisions of the Companies Act, 2013 are relevant to internal financial control and financial reporting.

Section 134: Financial Statements and Directors' Responsibility

Section 134 deals with the approval and authentication of financial statements, the Board's report, and related responsibilities.

Under Section 134(5)(e), the directors' responsibility statement for a listed company includes a statement that the directors have laid down internal financial controls to be followed by the company and that such controls are adequate and operating effectively.

This provision highlights the importance of management responsibility in establishing and maintaining appropriate financial control systems.

Directors should ensure that financial procedures are properly documented, significant risks are identified, and control deficiencies receive appropriate attention.

Section 143(3)(i): Reporting by Statutory Auditors

Section 143(3)(i) requires the statutory auditor, where applicable, to state in the audit report whether the company has adequate internal financial controls with reference to financial statements in place and whether those controls are operating effectively.

The auditor evaluates the relevant controls and obtains appropriate evidence before reaching a conclusion.

The assessment may cover transaction authorisation, accounting records, financial statement preparation, reconciliations, and controls over financial reporting systems.

Certain companies may qualify for exemptions from this reporting requirement, subject to applicable rules, notifications, and prescribed conditions. Companies should verify their eligibility rather than assume that the provision applies identically to every entity.

Section 129: Financial Statements

Section 129 addresses the preparation of financial statements and their requirement to give a true and fair view of the company's financial position, subject to applicable accounting standards and legal requirements.

Internal financial controls support this objective by helping companies ensure that transactions are complete, accurate, properly classified, and recorded in the appropriate accounting period.

For example, regular reconciliations and reviews of journal entries can help identify accounting discrepancies before financial statements are finalised.

Section 177: Audit Committee

Section 177 deals with the audit committee for specified classes of companies.

Where applicable, the audit committee has responsibilities concerning the evaluation of internal financial controls and risk management systems, along with other statutory functions.

An effective audit committee can support stronger financial oversight by reviewing significant risks, discussing audit findings, and monitoring corrective actions.

The exact applicability and composition requirements depend on the relevant statutory provisions and rules.

Why Internal Financial Controls Are Important Under the Companies Act

Internal financial controls support the objectives of corporate governance and reliable financial reporting.

1. Ensuring Accurate Financial Reporting

Controls help verify that financial transactions are properly recorded and that financial statements are supported by reliable accounting records.

Regular reconciliations, journal entry reviews, and transaction approvals reduce the risk of material errors.

2. Preventing and Detecting Financial Fraud

Unauthorised payments, duplicate invoices, false expense claims, and manipulation of financial records can create significant losses.

Appropriate controls help reduce these risks through restricted access, independent reviews, transaction monitoring, and clear approval procedures.

3. Protecting Company Assets

Companies need procedures to safeguard cash, inventory, equipment, investments, and other resources.

Asset registers, physical verification, access restrictions, and documented approvals help protect these resources against loss or misuse.

4. Strengthening Corporate Governance

Clearly assigned responsibilities improve accountability across departments. Directors and management can better monitor financial activities when reporting procedures and approval limits are documented.

5. Supporting Regulatory Compliance

A structured financial control system helps businesses maintain records, prepare financial statements, and meet applicable corporate reporting requirements.

It also creates an organised evidence trail that can assist auditors and management during reviews.

Responsibilities of Directors and Management

Directors and management have a central role in establishing an effective internal financial control framework.

Their responsibilities may include:

• Identifying significant financial reporting risks.

• Establishing appropriate policies and approval procedures.

• Ensuring that accounting records are maintained properly.

• Assigning responsibilities for financial transactions.

• Reviewing significant financial discrepancies.

• Monitoring the operation of important controls.

• Taking corrective action when weaknesses are identified.

Management should periodically assess whether existing controls remain suitable as the business grows, adopts new technology, or changes its operating model.

For example, a company expanding into multiple locations may need additional controls for branch expenses, inventory transfers, and consolidated financial reporting.

Responsibilities of Statutory Auditors

Statutory auditors independently assess internal financial controls with reference to financial statements when the applicable reporting requirements require them to do so.

The audit process may involve understanding the company's financial processes, identifying relevant risks, evaluating control design, and testing whether selected controls operated effectively.

Auditors may examine approval records, bank reconciliations, accounting system permissions, and supporting documents for selected transactions.

Where deficiencies are identified, the auditor evaluates their significance and considers their implications for the audit conclusion and reporting.

The auditor's role is distinct from management's responsibility to design, implement, and maintain the company's controls.

Which Companies Need to Pay Particular Attention to These Provisions?

Internal financial controls are relevant to businesses of different sizes, but specific statutory obligations vary.

Listed Companies

Listed companies must pay particular attention to directors' responsibilities under Section 134(5)(e) and the applicable statutory auditor reporting requirements.

They should maintain documented financial controls and establish procedures for monitoring their effectiveness.

Private Limited Companies

Private limited companies should assess their obligations under the Companies Act, applicable rules, and relevant exemptions.

Even where a company qualifies for an exemption from a particular auditor reporting requirement, maintaining appropriate financial controls remains a sound business practice.

Public Limited Companies

Public limited companies should evaluate their legal obligations according to their listing status, company classification, and applicable statutory requirements.

Companies that fall within specified audit committee requirements must also consider the relevant provisions of Section 177.

Growing Businesses and Startups

Growing businesses can benefit from implementing financial controls early. As transaction volumes increase, documented procedures help maintain accurate records, control expenditure, and support investor due diligence.

Common Internal Financial Control Weaknesses

Companies may face several issues when their financial control systems are not properly maintained.

Inadequate documentation: Missing invoices, approval records, or accounting explanations can make transactions difficult to verify.

Poor segregation of duties: Allowing one employee to initiate, approve, and record the same transaction can increase the risk of errors and misconduct.

Irregular reconciliations: Delayed bank and ledger reconciliations may allow discrepancies to remain unresolved.

Excessive system access: Employees with unnecessary accounting permissions may change financial information without appropriate oversight.

Weak monitoring: Controls may become ineffective if management does not investigate exceptions or follow up on audit findings.

Companies can address these weaknesses through written procedures, appropriate access restrictions, regular reviews, employee training, and documented corrective actions.

Steps to Strengthen Internal Financial Controls

Businesses can adopt a systematic approach to improving their control framework.

Step 1: Identify Financial Risks

Review significant financial processes, including revenue, purchases, payroll, cash management, and financial reporting.

Step 2: Document Policies and Procedures

Prepare clear guidelines covering transaction approvals, accounting responsibilities, supporting documents, and reporting timelines.

Step 3: Establish Appropriate Controls

Introduce reconciliations, independent reviews, access restrictions, and approval workflows according to the risks identified.

Step 4: Monitor Control Effectiveness

Perform periodic assessments to determine whether controls operate as intended and whether any new risks have emerged.

Step 5: Correct Identified Deficiencies

Assign responsibility for corrective actions, establish completion timelines, and retain evidence showing that weaknesses have been addressed.

Professional accounting, audit, and compliance advisers can assist companies in reviewing existing controls and developing a suitable implementation plan.

Conclusion

Internal Financial Control Under the Companies Act, 2013 is an important aspect of corporate governance, financial reporting, and business risk management. Sections 134(5)(e) and 143(3)(i) establish significant responsibilities for directors and statutory auditors, while Sections 129 and 177 provide additional context for financial reporting and oversight.

Companies should understand which provisions apply to their circumstances, maintain appropriate financial procedures, and regularly assess whether their controls are operating effectively.

By strengthening documentation, transaction approvals, reconciliations, and monitoring procedures, businesses can improve financial accuracy, reduce risks, and support greater stakeholder confidence. Companies seeking assistance with internal financial control assessments, audit preparation, or compliance reviews can consult qualified professionals for guidance tailored to their requirements.