Stock & Commodity Broker Audit — NSE/BSE/MCX: Who Needs It and Who Does Not
Whether Stock & Commodity Broker Audit — NSE/BSE/MCX applies to a given business is the first thing worth settling, and it is where most of the early questions land. The questions below are the ones raised most often in practice; the full scope of the service is on the Stock & Commodity Broker Audit — NSE/BSE/MCX page.
Who is eligible to conduct a broker's internal audit — can any Chartered Accountant do it?
SEBI and exchange circulars require the internal auditor to be an independent practising professional — a Chartered Accountant, Company Secretary, or Cost Accountant holding a valid Certificate of Practice — who is not part of the broker's day-to-day dealing or back-office operations. Since the half-year ended March 2024, exchanges have also tightened this further: the audit firm must be formally empanelled with an exchange, hold a minimum prescribed audit track record, and have a partner or employee holding the relevant securities-market certification, and exchanges accept internal audit reports only from firms on this empanelled list. Not every practising CA/CS/Cost Accountant automatically qualifies any more. PNPC confirms and documents this empanelment and independence position at the engagement letter stage for every broker audit we accept.
In practice: We are occasionally approached by brokers whose existing accountant or compliance officer also 'signs off' the internal audit informally. That does not meet the independence expectation the regulatory framework is built around, and it is exactly the kind of gap an exchange inspection is designed to catch.
Our brokerage firm is a partnership, not a company. Does the internal audit still apply?
Yes. The SEBI/exchange internal audit obligation attaches to the trading/clearing membership itself, not to the legal form of the entity holding it — partnership firms, LLPs, and companies that hold SEBI registration and exchange membership are all subject to the same half-yearly internal audit requirement. The entity's legal form does, however, affect which other audits apply — for instance, a company additionally requires a Companies Act statutory audit, while a partnership firm does not, though it may still require a tax audit under Section 44AB depending on turnover.
In practice: We map the full audit obligation set against the entity's actual legal structure at the start of every broker engagement, because assuming a partnership firm's obligations mirror a company's (or vice versa) leads to either unnecessary work or, worse, a missed requirement.
Does PNPC also handle the Companies Act statutory audit for a broking company, or only the exchange-mandated internal audit?
PNPC provides both, where appropriate, structured to respect the independence expectations that apply to each. A broking entity incorporated as a company requires its Companies Act statutory audit under Section 143 in addition to the SEBI/exchange internal audit — these are separate, non-substitutable engagements with different scopes, appointing authorities, and reporting destinations. Where PNPC is engaged for both, we ensure the two engagements are properly delineated and, where independence considerations require it, staffed by separate teams within our practice.
In practice: We explain this distinction to every new broking client at the outset, because it is a common point of confusion — a signed internal audit report does not fulfil the statutory audit requirement for a company, and vice versa; both are needed where both apply.
How does the internal audit treat dormant or inactive client accounts?
Dormant or long-inactive client accounts are typically tested for continued KYC validity (since KYC records can lapse or require periodic re-verification), any residual credit balance that should have been settled under the running account framework, and whether any activity occurred on an account that appeared otherwise dormant — which can be a red flag for unauthorised use of an inactive client code. Brokers are expected to have a defined policy for handling and periodically reviewing dormant accounts rather than leaving them unexamined indefinitely.
In practice: We specifically request a dormant-account listing as part of our document checklist and sample from it separately, rather than only testing active, high-volume accounts — dormant accounts are exactly where irregular activity is least likely to be noticed by the broker's own day-to-day team.
What is a kill-switch mechanism in algo trading, and does the audit test it?
A kill-switch is a control mechanism — required as part of SEBI's algo trading framework for brokers offering algorithmic trading facilities — that allows an algo strategy or a client's trading activity to be immediately halted if it breaches predefined risk parameters (such as an order-rate limit, a loss threshold, or erratic order patterns suggestive of a malfunctioning algorithm). Where a broker offers algo trading, the system audit and, to the extent operationally relevant, the internal audit test whether kill-switch mechanisms are properly configured, tested periodically, and have actually been triggered and logged where warranted.
In practice: We ask specifically for evidence that the kill-switch has been tested (not just configured) during the audit period — a control that exists on paper but has never actually been exercised or verified to work is a materially weaker control than one with a documented test history.
Where this sits in the wider engagement
Stock & Commodity Broker Audit — NSE/BSE/MCX rarely arrives on its own. The statutory basis and the current requirements are set out on the Stock & Commodity Broker Audit — NSE/BSE/MCX service page, and the related services are grouped under Audit Assurance.
What PNPC does
PNPC Global has practised since 1986 across India and the UAE. On Stock & Commodity Broker Audit — NSE/BSE/MCX we take the work end to end — reviewing the facts, preparing and filing what is required, and dealing with the authority through to closure.