Content authored by practitioners with experience at Amazon India, Intuit QuickBooks, and the Tata Group. Meet the team →
CARO 2020 (Order S.O. 849(E)) requires statutory auditors to report on 21 substantive clauses covering fixed assets, inventory, loans, statutory dues, fraud, borrowing end-use and auditor resignation. Most CARO qualifications trace to weak evidence in clauses (vii) statutory dues, (ix) borrowings, (xi) fraud and (xviii) resignation — areas where ledger-to-portal and ledger-to-bank reconciliation drives the conclusion.
Each clause is mapped to a working paper template with three columns: assertion under audit, evidence source, and conclusion language. Clause (vii) draws on GST/TDS/PF/ESI reconciliations between liability ledger, challan, portal acknowledgement and bank statement. Clause (ix) draws on lender confirmations, sanction letters and disbursement-to-end-use mapping. Clause (xi) draws on the fraud register, ADT-4 filings and whistle-blower log. Clause (xviii) draws on Form ADT-3 and the outgoing auditor's communication.
CARO 2020 working paper pack with 21 clause-specific templates, evidence-vault links to underlying reconciliations, materiality thresholds (₹1 crore for ADT-4, six months for statutory dues arrears), and pre-defined conclusion language for clean, qualified and adverse reporting.
CARO 2020 annexure ready for attachment to the main audit report under Section 143(11), clause-wise evidence trail accessible during peer review and ICAI quality review, and a deficiency log feeding the next year's planning memorandum.
A statutory auditor of a Bangalore-headquartered auto components manufacturer with ₹180 crore turnover finalised the CARO 2020 report two days before the AGM. Clause (vii) on statutory dues was qualified — three months of GST liability had been deposited five to nine days after the due date, and the working paper trail tying the liability ledger to challans and bank debits was incomplete. The qualification cost the company a covenant breach letter from its lead banker and a three-week delay in the next working capital review. This guide walks through each of the 21 CARO 2020 clauses, the evidence the auditor must hold, and the working paper structure that withstands ICAI peer review.
Quick Reference — CARO 2020 at a Glance
| Clause | Subject | Primary Evidence | Common Pitfall |
|---|---|---|---|
| (i) | Property, plant and equipment | FAR, physical verification report, title deeds | Title deeds not in company name |
| (ii) | Inventory | Physical count, perpetual records, quarterly returns to banks | Bank stock statement variance above 10% |
| (iii) | Loans, advances, investments | Sanction letters, repayment schedules, related-party register | Related-party loans below market rate |
| (iv) | Section 185/186 compliance | Board resolutions, deposit register | Loans to directors not approved |
| (v) | Deposits under Section 73 | DPT-3 filings, deposit register | Inter-corporate deposits misclassified |
| (vi) | Cost records under Section 148 | Cost audit report, CRA-3 | Records not maintained for prescribed industries |
| (vii) | Statutory dues | Liability ledger to challan to portal trail | Dues outstanding over six months unreported |
| (viii) | Unrecorded income | Tax assessment orders, ITSC orders | Surrendered income not recorded in books |
| (ix) | Borrowings, default, end-use | Lender confirmations, sanction letters | Short-term funds applied long-term |
| (x) | IPO/FPO and preferential allotment | Prospectus, end-use certificate | Funds raised not applied per offer document |
| (xi) | Fraud and whistle-blower | Fraud register, ADT-4, whistle-blower log | ADT-4 not filed for fraud above ₹1 crore |
| (xii) | Nidhi Company | Net owned funds, deposit ratio | Not applicable except for Nidhi |
| (xiii) | Related party transactions | Section 177/188 disclosures | RPT not approved by Audit Committee |
| (xiv) | Internal audit | Internal audit reports, scope coverage | Internal audit not commensurate with size |
| (xv) | Non-cash transactions with directors | Section 192 compliance | Asset transfers without approval |
| (xvi) | RBI registration | CoR copy, NBFC returns | Operating as NBFC without registration |
| (xvii) | Cash losses | Profit and loss for current and preceding year | Cash losses understated by depreciation policy |
| (xviii) | Resignation of statutory auditor | ADT-3, outgoing auditor communication | Concerns of outgoing auditor not addressed |
| (xix) | Material uncertainty on going concern | Cash flow forecast, working capital position | Going concern qualified without ratio analysis |
| (xx) | CSR transfer | Section 135 compliance, unspent CSR account | Unspent amounts not transferred to schedule VII fund |
| (xxi) | Qualifications in CARO of subsidiaries | Consolidated reporting | Subsidiary CARO qualifications not aggregated |
How Is Clause (i) on Property, Plant and Equipment Audited?
Clause (i) has four sub-clauses. Clause (i)(a)(A) requires the auditor to state whether the company maintains proper records showing full particulars including quantitative details and situation of property, plant and equipment (PPE). Clause (i)(a)(B) covers intangible assets. Clause (i)(b) covers physical verification by management at reasonable intervals. Clause (i)(c) covers title deeds — every immovable property must have title in the company’s name, except for properties where the company is the lessee and the lease agreement is duly executed.
The evidence base is the Fixed Asset Register (FAR) reconciled to the General Ledger and to the physical verification report. A common failure is a FAR-to-GL variance that the company has been carrying for two or three years because the FAR is maintained in Excel and not refreshed for retirements. Where the variance is below the auditor’s working materiality the clause stays clean; above it, the auditor must qualify. Clause (i)(d) covers revaluation — if any class of PPE has been revalued, the auditor must state whether the revaluation is based on a registered valuer’s report under the Companies (Registered Valuers and Valuation) Rules 2017.
How Are Statutory Dues Reported Under Clause (vii)?
Clause (vii) is the single highest-volume CARO clause in most working paper files because the evidence has to be built for every statutory levy the company is subject to. Clause (vii)(a) covers undisputed dues — whether the company is regular in depositing GST, provident fund, employees’ state insurance, income tax, tax deducted at source, customs duty, cess and any other statutory dues with the appropriate authorities.
The working paper is a three-link reconciliation: liability ledger to challan, challan to portal acknowledgement (GSTN, TRACES, EPFO, ESIC), and portal acknowledgement to bank statement debit. Any break in the chain becomes an audit observation. Where the company has high transaction volumes — typically 1,000+ monthly bank transactions or 200+ TDS deductor relationships — the reconciliation cannot be reconstructed at year-end from spreadsheets without a measurable error rate.
TransactIG’s reconciliation infrastructure holds the three-link trail continuously through the year, with timestamps and exception logs, so the CARO clause (vii) working paper becomes a query of the system log rather than a year-end forensic exercise. For TDS specifically, where the auditor must also reconcile TDS receivable with Form 26AS for income recognition, TDS reconciliation software keeps the 26AS-to-ledger gap inside the correction return window.
What Is the Worked Example for a ₹180 Crore Manufacturer?
Consider a private limited auto components manufacturer in Bangalore with FY26 turnover of ₹180 crore, paid-up capital and reserves of ₹42 crore, and outstanding term loans of ₹35 crore. The company is in CARO scope because turnover exceeds ₹10 crore and borrowings exceed ₹1 crore. The auditor’s clause-by-clause approach for the FY26 audit closes as follows.
Clause (i) — clean. FAR reconciles to GL within ₹1.8 lakh; physical verification done semi-annually; all 11 immovable properties have title in the company’s name; no revaluation in the year.
Clause (ii) — qualified. Bank stock statement variance against books exceeded 10% in two months (April and October), with the company over-reporting stock to the lender by ₹2.4 crore in April and ₹3.1 crore in October. The auditor reports the variance with month-wise detail.
Clause (vii)(a) — qualified. GST liability for July, August and September was deposited five to nine days after the 20th. Provident fund contribution for February was deposited 11 days late. TDS for two months was deposited within the due date but the return for Q3 (Form 26Q) was filed seven days late. The auditor tabulates each delay with nature, period, amount and date of payment.
Clause (ix)(c) — clean. Term loans of ₹35 crore were applied entirely for plant and machinery as per sanction letters; disbursement-to-purchase order mapping is intact.
Clause (xi)(a) — clean. One incident of ₹14.7 lakh inventory shrinkage in the Hosur depot was investigated; the company recovered ₹9.2 lakh from the depot manager and wrote off ₹5.5 lakh. The amount is below the ₹1 crore ADT-4 threshold so the matter was reported to the Audit Committee only.
Clause (xviii) — clean. The previous auditor completed their term; no resignation in the year; not applicable.
Clause (xix) — clean. Cash flow forecast shows positive working capital for the next 12 months; debt service coverage ratio is 2.1 times; no material uncertainty on going concern.
Where Do CARO 2020 Working Papers Fail Peer Review?
ICAI peer review under the Peer Review Guidelines 2022 and quality review by the Quality Review Board flag three patterns most often. First, conclusion language that does not match the evidence — a “clean” conclusion on clause (vii) when the working paper shows two months of delayed GST payment without follow-on quantification. Second, clause (ix)(c) end-use audit done at the summary level (total disbursement vs total capital expenditure) without tying each disbursement tranche to a purchase order. Third, clause (xviii) closed with a single sentence stating no concerns were raised, without the auditor having read Form ADT-3.
Want to size the audit-time cost of these reconciliation gaps? The three-way match exception cost calculator translates exception volume and resolution time into auditor hours, which is the number that drives the next-year planning memorandum.
How Should the CARO Working Paper Pack Be Structured?
A defensible pack contains, for each of the 21 clauses: the clause text, the management assertion under audit, the SA reference (most commonly SA 500 on audit evidence and SA 330 on responses to assessed risks), the procedure performed, the sample size and selection basis, the evidence source with link to the underlying file, the result of the procedure, the conclusion, and the cross-reference to the CARO annexure paragraph. The pack closes with a clause-wise deficiency log that feeds next year’s planning.
The annexure attached to the audit report under Section 143(11) is the visible output, but the working paper pack is what the ICAI peer reviewer or Quality Review Board inspector will examine. For audit firms running multiple statutory audits in parallel, the underlying reconciliation evidence — bank, TDS, GST, statutory dues — is the rate-limiting input. The Companies Act framework and the current CARO notification are published on the Ministry of Corporate Affairs website.
For Indian auditors building a CARO 2020 working paper template, the practical move is to standardise the three-link reconciliation trail for clause (vii), the disbursement-to-end-use map for clause (ix), and the fraud-to-ADT-4 threshold logic for clause (xi). The FAQs below cover the exemption thresholds, ADT-4 reporting and clause-specific procedures that come up most often in the field.