Stock & Commodity Broker Audit — NSE/BSE/MCX: After Approval: What Continues
Stock & Commodity Broker Audit — NSE/BSE/MCX does not end at approval — a set of obligations continues afterwards. The questions below are the ones raised most often in practice; the full scope of the service is on the Stock & Commodity Broker Audit — NSE/BSE/MCX page.
What exactly is a 'Broker Audit' — is it one audit or several different ones?
It is a family of related but distinct audit and certification obligations that a SEBI-registered stock or commodity broker faces because of its exchange membership — principally the half-yearly Internal Audit mandated by SEBI for all trading/clearing members and Depository Participants, alongside periodic System Audit (for members meeting specified technology/algo-trading criteria), Net Worth Certification, and the entity's own Companies Act statutory audit if it is incorporated as a company. PNPC typically scopes these together for a client so the overall compliance picture is coherent, even though each has its own periodicity and reporting format to the relevant exchange or regulator.
In practice: New broking entities are often surprised that 'the audit' is not a single annual event the way a Companies Act audit is. We map out the full audit calendar — which obligation, which exchange, which window — at the very first engagement conversation, so nothing is discovered only when a deadline has already passed.
What are Authorised Persons (APs), and does the internal audit cover them too?
An Authorised Person is an individual or entity engaged by a registered trading member to provide broking-related services to clients on the member's behalf — effectively an extension of the broker's distribution — operating under an agreement with, and under the regulatory umbrella of, the principal trading member's registration. While APs are not separately SEBI-registered as brokers in their own right, the internal audit of the principal trading member typically extends to reviewing AP-level client onboarding practices, order routing arrangements, and brokerage-sharing compliance, because the principal member remains responsible for the AP's conduct under exchange rules.
In practice: We recommend brokers with a significant AP/franchise network build AP-level sampling into every internal audit cycle rather than testing only head-office activity — a large share of onboarding and grievance issues we encounter originate at the AP level, not at the broker's own branch operations.
If we are a new broking entity that has not yet completed our first trading cycle, when should we engage PNPC?
We recommend engaging your internal auditor before your first client is onboarded, not after your first half-year cycle has already closed. Early engagement allows PNPC to review your KYC/UCC process design, client fund segregation account setup, RMS parameter documentation, and contract note templates before they go live — so the first internal audit cycle tests a properly designed control environment rather than uncovering foundational gaps after months of live trading activity.
In practice: The cost of redesigning a client onboarding or fund segregation process after several months of live operation — including any client-facing corrections that may be needed — is consistently higher than the cost of getting the design right before go-live. We treat this pre-launch review as one of the highest-value conversations we have with a new broking client.
What is the difference between an 'internal audit' finding and a 'statutory' compliance breach — does a finding automatically mean the broker is in trouble?
Not necessarily. An internal audit finding is simply the auditor's observation that a specific process did not operate as prescribed for the sample or period tested — it could range from a minor documentation gap (a missing signature on a KYC form) to a serious control failure (evidence of client fund commingling). The audit report itself is a diagnostic tool: findings, management's response, and the corrective action taken are what the exchange and, if escalated, SEBI actually evaluate. A broker that identifies issues through its own internal audit and closes them promptly is generally viewed far more favourably than one where the same issue is later discovered externally.
In practice: We deliberately frame findings for clients in terms of severity and required corrective action, not as a pass/fail verdict — the value of the internal audit is in surfacing issues early enough to fix them, and clients who understand this get more genuine value from the process than those who treat every finding as an alarm.
What role does the Board or governing body play in the internal audit process — is it just a formality to present the report to them?
SEBI and exchange expectations treat presentation of the internal audit report to the Board (or equivalent governing body for a partnership/LLP) as a genuine governance checkpoint, not a formality — the Board is expected to discuss the findings, direct and track corrective action, and be able to demonstrate that it exercised oversight over the compliance function, not merely receive the report as an information item. This becomes particularly relevant if an issue later escalates to an exchange inspection or SEBI action, where the quality of Board-level engagement with prior audit findings is itself scrutinised.
In practice: We prepare a structured findings summary specifically for Board-level discussion — not just the full technical report — so that Board members who are not accounting specialists can meaningfully engage with the findings and document their oversight, rather than rubber-stamping a lengthy technical document they have not substantively reviewed.
What is the relationship between SEBI's SCORES platform and the exchange's own investor grievance mechanism?
SCORES (SEBI Complaints Redress System) is SEBI's centralised online platform through which investors can lodge complaints against SEBI-registered intermediaries, including brokers, with the complaint routed to the intermediary for response within prescribed timelines and escalated within SEBI's framework if unresolved. Exchanges separately maintain their own investor grievance redressal mechanisms (including arbitration facilities for monetary disputes). The internal audit reviews both channels together, reconciling the broker's own grievance register against complaints logged on SCORES and with the exchange, to confirm nothing is being handled informally outside these official channels.
In practice: A broker's own internal grievance log showing fewer complaints than what appears on SCORES for the same period is a specific reconciliation gap we look for — it can indicate complaints are being resolved outside the formal record, which is itself a process weakness even if the underlying complaint was genuinely resolved to the client's satisfaction.
Is a stock broker required to maintain a separate audit trail for orders placed through a mobile trading app versus a desktop terminal?
The underlying regulatory expectation is that every order, regardless of the channel through which it was placed — desktop terminal, mobile app, API, or call-and-trade — must be traceable to the specific client and properly logged with a complete audit trail, rather than the channel itself dictating a different standard of record-keeping. The internal audit tests order logs across whichever channels the broker actually offers, verifying that multi-channel access has not created gaps in traceability or authorisation control.
In practice: Brokers offering multiple order channels (app, web, API, call-and-trade) sometimes have inconsistent logging quality across channels — often the older or less-used channel has weaker audit trail capture. We test each channel the broker actually offers rather than assuming the primary channel's controls apply uniformly.
Where this sits in the wider engagement
Stock & Commodity Broker Audit — NSE/BSE/MCX rarely arrives on its own. The statutory basis and the current requirements are set out on the Stock & Commodity Broker Audit — NSE/BSE/MCX service page, and the related services are grouped under Audit Assurance.
What PNPC does
PNPC Global has practised since 1986 across India and the UAE. On Stock & Commodity Broker Audit — NSE/BSE/MCX we take the work end to end — reviewing the facts, preparing and filing what is required, and dealing with the authority through to closure.