Bank Concurrent & Statutory Audit: Timelines and What Drives Them
How long Bank Concurrent & Statutory Audit takes depends on a handful of things that are largely within your control. The questions below are the ones raised most often in practice; the full scope of the service is on the Bank Concurrent & Statutory Audit page.
What exactly is bank concurrent audit?
It is an ongoing, near-real-time review of a bank branch's or specialised unit's day-to-day transactions and internal controls, conducted by an appointed Chartered Accountant, reporting to bank management on a monthly or quarterly cycle throughout the year — distinct from the once-a-year statutory branch audit, which culminates in a signed attest opinion and the Long Form Audit Report (LFAR).
In practice: Clients sometimes use 'concurrent audit' and 'branch audit' interchangeably. They are not the same function — concurrent audit is continuous and reports to management; statutory branch audit is annual and results in a formal audit opinion. A branch can be, and often is, subject to both.
What does a concurrent auditor actually test on a day-to-day basis?
Typical scope includes: cash and vault operations, KYC/AML documentation at new account opening, sanction and documentation compliance at the time of loan disbursement, remittance and clearing transactions, deposit mobilisation and premature closure handling, foreign exchange transactions at authorised branches, and ongoing reconciliation of suspense, sundry, and inter-branch accounts — all tested close to the transaction date rather than in a year-end review.
In practice: The defining discipline of concurrent audit is testing fresh transactions promptly. A concurrent audit that only reviews transactions in a batch at month-end has lost much of the early-detection value the function is meant to provide.
Does concurrent audit cover advances the same way statutory branch audit does?
Concurrent audit reviews documentation and sanction-term compliance at the point of disbursement and periodically thereafter — a real-time control check. Statutory branch audit's advances testing is a year-end exercise applying RBI's IRAC (Income Recognition, Asset Classification and Provisioning) norms to classify each sampled account as Standard, Special Mention Account, Sub-Standard, Doubtful, or Loss based on overdue days. Both examine advances, but with different objectives and timing — concurrent audit for ongoing control discipline, statutory audit for year-end classification and provisioning accuracy.
In practice: Where PNPC holds both mandates at a branch, our concurrent audit observations on disbursement documentation through the year directly inform the statutory audit's advances sampling and risk assessment.
What happens if a concurrent auditor finds a serious irregularity?
Serious or time-sensitive findings — a suspected unauthorised transaction, a significant documentation gap on a large disbursement, evidence of KYC circumvention — are escalated to bank management outside the normal reporting cycle, following the bank's specified escalation protocol, rather than held for the next scheduled monthly or quarterly report.
In practice: We agree the exact escalation protocol and contact point with the bank at engagement acceptance, so there is no ambiguity about who is notified and how quickly when a serious finding arises.
What documentation should a branch keep ready for the concurrent audit team?
At minimum: daily cash and vault registers, CBS transaction reports for the review period, the new account opening register with KYC documentation, the loan disbursement register with linked security documentation, remittance and clearing records, and reconciliation statements for inter-branch and suspense accounts, kept current rather than reconstructed at review time.
In practice: We share a specific, bank-manual-aligned document checklist with the branch at engagement start — branches that maintain these records current in the ordinary course, rather than only for audit purposes, get materially faster and more useful concurrent audit cycles.
What are IRAC norms and how do they relate to concurrent audit?
IRAC stands for Income Recognition, Asset Classification and Provisioning — RBI's framework for classifying every advance account (Standard, Special Mention Account, Sub-Standard, Doubtful, or Loss) based primarily on overdue days, and determining the provisioning required for each classification. IRAC-based classification testing is core to the annual statutory branch audit rather than concurrent audit's day-to-day scope, though concurrent audit's ongoing review of disbursement documentation and account conduct can flag early warning signs (excess drawings, documentation lapses) relevant to eventual IRAC classification.
In practice: We are precise with clients about which framework applies to which engagement — IRAC classification is a statutory-audit-stage exercise, while concurrent audit's contribution is upstream control testing that reduces the likelihood of classification surprises at year-end.
Is concurrent audit relevant to a branch's KYC/AML compliance specifically?
Yes — KYC documentation completeness at new account opening and ongoing due diligence on existing accounts is a standard and important part of concurrent audit scope, given that KYC/AML gaps are precisely the kind of control lapse that continuous, near-real-time review is positioned to catch quickly, compared to a once-a-year statutory sample.
In practice: We treat KYC/AML testing as a non-negotiable component of every concurrent audit cycle, reviewing every new account opened in the period rather than a partial sample, given the regulatory sensitivity of this area.
Why should a bank or CA firm choose PNPC for concurrent and statutory bank audit support?
PNPC has executed concurrent audit, statutory branch audit, and related banking-sector assignments across public sector, private sector, and cooperative banks since 1986. Our teams bring disciplined, on-time periodic reporting for concurrent audit, technical depth in IRAC classification and LFAR preparation for statutory audit, and — where a bank engages PNPC for both functions at the same branch — genuine continuity of institutional knowledge across the audit calendar rather than two disconnected engagements. We are a practising CA firm with decades of banking-audit experience, not a generalist audit team applying a one-size-fits-all checklist to a specialised function.
In practice: The clearest signal of concurrent audit quality is whether findings are specific, evidence-backed, and tracked for resolution cycle over cycle — that is what we optimise for on every mandate we hold.
Where this sits in the wider engagement
Bank Concurrent & Statutory Audit rarely arrives on its own. The statutory basis and the current requirements are set out on the Bank Concurrent & Statutory Audit service page, and the related services are grouped under Audit Assurance.
What PNPC does
PNPC Global has practised since 1986 across India and the UAE. On Bank Concurrent & Statutory Audit we take the work end to end — reviewing the facts, preparing and filing what is required, and dealing with the authority through to closure.