SEBI Broker Internal Audit Services: After Approval: What Continues
SEBI Broker Internal Audit Services does not end at approval — a set of obligations continues afterwards. The questions below are the ones raised most often in practice; the full scope of the service is on the SEBI Broker Internal Audit Services page.
What is the difference between client fund segregation testing and a bank reconciliation?
A standard bank reconciliation confirms that your books match your bank statement. Client fund segregation testing goes further — it verifies that client money was kept entirely separate from the broker's own (proprietary) funds throughout the period, was not used to fund the broker's own trading or operating expenses even temporarily, and that any client fund balance held by the broker corresponds to a genuine, currently valid client obligation. It is a substantive compliance test, not just an arithmetic reconciliation.
In practice: A finding in this area need not involve outright fraud — operational sloppiness, such as client and proprietary funds briefly intermingled during a settlement cycle due to a manual process gap, can be enough. It is still a reportable finding and needs a process fix, even when there is no intent to misuse funds.
What happens if client funds and securities are found to be co-mingled with the broker's own funds?
This is treated as a serious compliance breach under SEBI's client fund and securities segregation framework. Depending on severity and whether it is an isolated operational lapse or a pattern, consequences can range from a documented finding requiring immediate remediation, to exchange-level penalty action, to more serious regulatory consequences including restrictions on the broker's trading facility in egregious or repeated cases. The specific consequence depends on the facts, the amount involved, and whether the broker proactively identified and disclosed the issue.
In practice: Self-identification and prompt remediation, documented through the internal audit process, is always a materially better position than the same issue being discovered first by the exchange or SEBI. We treat any segregation finding as high-priority and escalate it immediately to management, not just in the routine draft report cycle.
What is the difference between the half-yearly internal audit and a Cyber Security / System Audit?
The half-yearly internal audit covers operational and financial compliance — client fund segregation, margin, UCC, RMS, grievance handling. The Cyber Security and Cyber Resilience Framework (CSCRF) audit and the separate System Audit are distinct, more technically specialised reviews of the broker's IT infrastructure, data security controls, business continuity and disaster recovery arrangements, and cyber-incident response readiness, each governed by its own SEBI circular framework and typically conducted by an auditor with specific systems-audit or CERT-In empanelment credentials in addition to CA qualification. These may be required of the same broker depending on its category and client base, but are generally scoped, quoted, and conducted as separate engagements from the half-yearly internal audit.
In practice: We coordinate the calendar for clients who need both, so the two engagements do not create duplicate document requests or conflicting timelines, even though the technical scope and reporting format differ.
How is brokerage and statutory levy computation tested?
We sample-test contract notes and the underlying trade data to verify that brokerage was computed per the agreed client rate, and that statutory levies — Securities Transaction Tax (STT), stamp duty, exchange transaction charges, SEBI turnover fees, and GST on brokerage — were correctly computed, collected, and remitted. Errors here typically surface either as under-collection (a revenue leakage and potential compliance issue for the broker) or over-collection (a client-facing compliance and reputational issue).
In practice: Stamp duty computation in particular should be tested against the uniform rates by instrument type that have applied nationally since 1 July 2020 under the Indian Stamp Act as amended, with collection routed through the exchanges, clearing corporations and depositories. We test that the charges applied to client contract notes match the current applicable rate for each instrument type traded.
How much does a SEBI broker internal audit engagement with PNPC cost?
Fees depend on your registration category (trading member, clearing member, DP, or a combination), the number of exchanges and segments you operate in, your client base size and transaction volume, and whether the engagement is a fresh first-cycle audit or a continuing engagement with an established control baseline. We provide a written scope and fee proposal, structured as a per-half-yearly-cycle or annual retainer fee, before any engagement begins.
In practice: We price based on actual testing scope required for your specific operations, not a flat generic fee — a single-segment, low-volume broker and a multi-segment, high-volume broker with a DP registration require materially different levels of testing effort, and the fee should reflect that honestly.
Can PNPC support brokers with operations or group entities in the UAE as well as India?
Yes. PNPC operates from Chennai, Bangalore, and Hyderabad in India, and from Dubai in the UAE. For broking groups with an Indian SEBI-registered entity and a related UAE entity — for example, a UAE-based advisory or introducing arrangement feeding into the Indian broking business — we coordinate the India-side SEBI internal audit with the appropriate India-UAE cross-border and group-level compliance review, rather than treating the two as disconnected engagements handled by separate, uncoordinated firms.
In practice: Cross-border referral and introducing-broker arrangements between an Indian broker and a UAE entity have their own regulatory considerations on both sides — we flag this specifically where relevant during scope-setting, since it is easy to overlook if the audit is scoped narrowly to the Indian entity alone.
What happens if we simply skip or delay the half-yearly internal audit?
Non-submission or late submission of the mandated half-yearly internal audit report is treated as a compliance lapse by the exchange/depository and can attract monetary penalties, formal deficiency communication, and, in the case of repeated or serious non-compliance, more significant regulatory consequences up to restrictions on the broker's trading facility. Beyond the direct penalty, skipping the audit also means genuine control gaps — segregation issues, margin shortfalls, UCC errors — go undetected internally until an external party, such as the exchange itself, finds them first.
In practice: We have never seen a case where deferring or skipping this audit turned out to be the cheaper option once the eventual regulatory and remediation cost is factored in. We build reminders into our compliance calendar well ahead of each half-yearly deadline specifically to prevent this.
How does PNPC stay current with frequently changing SEBI circulars relevant to broker audits?
SEBI and the exchanges issue circulars on margin methodology, segregation reporting formats, running account rules, and related operational matters on an ongoing basis, and the applicable framework for a given half-yearly cycle should always be confirmed against circulars in force at that time rather than assumed to be static. PNPC's audit teams track circular updates relevant to the broking sector as part of maintaining our audit methodology, and we confirm the current applicable framework for each client's specific cycle before finalising scope.
In practice: We explicitly flag to clients when a circular update mid-cycle changes a reporting format or methodology, since it is common for a broker's own back-office system configuration to lag behind a regulatory update by several weeks or more.
Where this sits in the wider engagement
SEBI Broker Internal Audit Services rarely arrives on its own. The statutory basis and the current requirements are set out on the SEBI Broker Internal Audit Services service page, and the related services are grouped under Audit Assurance.
What PNPC does
PNPC Global has practised since 1986 across India and the UAE. On SEBI Broker Internal Audit Services we take the work end to end — reviewing the facts, preparing and filing what is required, and dealing with the authority through to closure.