ICAI Peer Review Services  — SQC 1 Quality Control Review, Standards on Auditing Compliance & Peer Review Certificate Advisory

ICAI Peer Review Services in India

The quality of audit in India depends not just on the individual CA's competence, but on the quality control systems that the CA firm has built — the policies and procedures that govern how audits are planned, supervised, reviewed, and documented across every engagement the firm undertakes. A firm with one brilliant audit partner can still produce poor audit quality if its working paper standards are inadequate, its independence procedures are superficial, or its engagement acceptance process does not identify high-risk clients before the relationship begins. The ICAI Peer Review programme exists precisely to assess these firm-level quality systems — not just the output of individual engagements, but the infrastructure that produces that output.

Peer Review is a structured, independent quality assurance review of a CA firm (called the Practice Unit in ICAI terminology) — conducted by another empanelled CA firm (the Peer Reviewer) under the supervision of the ICAI Peer Review Board. The Peer Reviewer examines whether the Practice Unit has implemented an adequate quality control system as required by SQC 1 (Standard on Quality Control 1), and whether the actual audit work performed on selected engagements complied with the applicable Standards on Auditing.

N D Savla & Associates is an ICAI-empanelled Peer Review firm — authorised to conduct peer reviews of other CA firms and Practice Units. We bring to every peer review engagement the same rigour and independence that our broader audit and assurance practice applies to financial statement audits — professional scepticism, evidence-based findings, and a report that reflects what we actually found rather than what the reviewed firm would prefer to hear.

What Is ICAI Peer Review — and What Does It Examine?

ICAI Peer Review is an independent examination of the systems, procedures, and audit documentation of a Practice Unit — to determine whether the firm has complied with the technical, professional, and ethical standards applicable to its audit and assurance practice. The peer review examines five core dimensions of a CA firm's audit quality:

• Quality control system (SQC 1 compliance): Whether the firm has documented quality control policies and procedures covering all six elements of SQC 1 — leadership, ethics, client acceptance, human resources, engagement performance, and monitoring.
• Standards on Auditing (SA) compliance: Whether selected audit engagements were planned and executed in compliance with the applicable SAs — SA 200, SA 315, SA 330, SA 500, SA 700, and others.
• Independence and ethics: Whether the firm has adequate procedures to identify and manage independence threats — financial interests in clients, personal relationships, management participation, and advocacy threats.
• Engagement documentation: Whether audit files contain sufficient, appropriate evidence to support the audit conclusions — planning documents, risk assessments, substantive testing workpapers, review notes, management letters, and final audit reports.
• Professional development: Whether the firm maintains adequate training and CPE records for its partners and audit staff — ensuring the team has the technical competence to perform the engagements they undertake.

Who Must Undergo ICAI Peer Review — Mandatory and Voluntary Categories

?? The expansion of mandatory peer review categories is an ongoing process. CA firms that are not currently in a mandatory category should monitor ICAI announcements. Being subject to mandatory peer review without an active certificate creates regulatory and reputational risk that can be entirely avoided with proactive peer review planning.

What Is SQC 1 — and Why Is It the Foundation of Peer Review?

Standard on Quality Control 1 (SQC 1) — issued by the ICAI under the authority of Section 143(10) of the Companies Act 2013 — prescribes the quality control requirements for CA firms for audits and reviews of historical financial information and other assurance and related services engagements. SQC 1 covers six elements that together constitute a complete quality control system:

Element 1 — Leadership Responsibilities for Quality

The firm must establish a culture that recognises quality as essential to performing engagements — with the firm's leadership demonstrating by their actions, communications, and decisions that quality takes precedence over commercial considerations. SQC 1 requires that a partner or senior person be assigned overall responsibility for the firm's quality control system.

Element 2 — Ethical Requirements

The firm must establish policies and procedures to provide reasonable assurance that the firm and its personnel comply with relevant ethical requirements — including the ICAI Code of Ethics and the independence requirements applicable to specific engagements. The peer reviewer assesses whether the firm has procedures for: identifying independence threats (financial interests, business relationships, employment relationships); evaluating the significance of identified threats; and applying appropriate safeguards.

Element 3 — Acceptance and Continuance of Client Relationships

The firm must establish policies and procedures for deciding whether to accept a new client or continue an existing one — assessing the client's integrity, the firm's competence to perform the engagement, and the firm's ability to comply with ethical requirements. The peer reviewer reviews the firm's acceptance documentation for selected engagements and assesses whether the acceptance decision was adequately supported.

Element 4 — Human Resources

The firm must have sufficient personnel with the competence, capability, and commitment to ethical principles to perform engagements. The peer reviewer assesses whether the firm's staffing levels are adequate for the volume and complexity of its practice, whether staff have the technical knowledge for the engagements they perform, and whether CPE requirements are being met.

Element 5 — Engagement Performance

The firm must have policies and procedures that ensure engagements are performed in accordance with professional standards. This element covers: supervision and review procedures; consultation procedures for difficult or contentious matters; Engagement Quality Control (EQC) review for listed company and other high-risk engagements; and differences of opinion resolution procedures. The EQC reviewer — an independent partner who reviews the engagement before the report is issued — is a particularly important safeguard for listed company audits.

Element 6 — Monitoring

The firm must monitor its quality control system to provide reasonable assurance that it is operating effectively and being complied with in practice. This requires at least annual review of the firm's quality control policies; periodic internal inspection of completed engagement files; communication of inspection findings to the engagement partner and relevant personnel; and follow-up on inspection findings to ensure deficiencies are remediated.

What Is the Peer Review Process — Step by Step?

1. Notification from ICAI Peer Review Board — The ICAI Peer Review Board notifies the Practice Unit that it is due for peer review — based on the mandatory category schedule or the voluntary application of the Practice Unit. The notification specifies the timeline within which the review must be completed and the Peer Review Certificate obtained.
2. Engagement of Peer Reviewer — The Practice Unit engages an ICAI-empanelled Peer Reviewer — a CA firm authorised by the Peer Review Board to conduct peer reviews. The Peer Reviewer must be independent of the Practice Unit — no audit, tax, or advisory relationship with the Practice Unit or its clients. The engagement is formalised through an appointment letter from the Peer Review Board.
3. Planning — Practice Unit Profile and Engagement Selection — The Peer Reviewer begins by obtaining the Practice Unit's profile — types of engagements performed, number of partners and staff, categories of clients, and the firm's quality control documentation. Based on this profile, the Peer Reviewer selects engagements for file review — typically a sample spanning different partners, client categories, and financial years. Listed company audits and high-risk engagements are prioritised.
4. Quality Control Documentation Review — The Peer Reviewer examines the Practice Unit's written quality control policies and procedures — assessing whether they cover all six SQC 1 elements, whether they are appropriately detailed for the firm's size and practice profile, and whether they have been updated to reflect changes in professional standards. Gaps between the firm's documented procedures and SQC 1 requirements are documented as findings.
5. Engagement File Review — The Peer Reviewer examines the selected audit engagement files in detail — assessing whether the work performed on each engagement complied with the applicable Standards on Auditing. Key areas: planning documentation (risk assessment, materiality, audit strategy); substantive testing (whether evidence is sufficient and appropriate); review documentation (sign-off evidence); management letter and audit report; and independence documentation for the engagement.
6. Interaction with Practice Unit Personnel — The Peer Reviewer conducts professional discussions with the Practice Unit's partners and audit staff — clarifying the firm's practices, understanding the rationale for specific engagement decisions, and assessing whether the quality culture required by SQC 1 is genuinely embedded in the firm's day-to-day operations.
7. Observations and Draft Report — The Peer Reviewer documents the findings — categorised into: matters where the Practice Unit is in compliance; observations (areas where improvement is recommended but compliance is not materially deficient); and significant deficiencies. The Peer Reviewer prepares a draft report and shares it with the Practice Unit — giving them an opportunity to respond and provide clarifications.
8. Final Report Submission to ICAI Peer Review Board — After considering the Practice Unit's response, the Peer Reviewer finalises the report in the ICAI prescribed format and submits it to the Peer Review Board. The Peer Review Board reviews the report and — where findings are satisfactory — issues the Peer Review Certificate to the Practice Unit, valid for 3 years.

What Is the Peer Review Certificate — and What Can a Firm Do with It?

• Enables listed company audit appointments: SEBI and ICAI regulations require firms auditing listed companies to hold a valid Peer Review Certificate. Without it, new listed company audit appointments cannot be accepted.
• Enables bank and NBFC audit empanelment: RBI empanelment for bank statutory audits and concurrent audits requires a valid certificate for firms above the prescribed threshold.
• Enables insurance and C&AG empanelment: IRDAI and C&AG empanelment requirements for firms above prescribed thresholds include a valid Peer Review Certificate.
• Demonstrates quality commitment: For firms in voluntary categories — or firms presenting credentials to potential clients in the corporate or institutional sector — a Peer Review Certificate demonstrates a commitment to audit quality that goes beyond the minimum requirements.
• Valid for 3 years: The certificate must be renewed every 3 years by undergoing another peer review. Firms must plan the renewal review well before the current certificate expires to avoid a gap in certification.

Historical Context — How the ICAI Peer Review Programme Evolved

ICAI formally launched the Peer Review programme in India in 2002 — initially as a voluntary programme. The Peer Review Board was established to oversee the programme — setting the guidelines, empanelling peer reviewers, and issuing certificates. The progressive expansion to mandatory categories began in 2009 — when ICAI mandated peer review for firms auditing listed companies, aligning India's practice with international standards. Subsequent years saw the expansion of mandatory categories to include bank auditors (RBI empanelment link) and C&AG-empanelled firms.

The Companies Act 2013 and SEBI's increasing scrutiny of audit quality — particularly after a series of corporate governance failures (Satyam 2009, IL&FS 2018, DHFL 2019) — created momentum for further strengthening of the peer review programme. The establishment of the National Financial Reporting Authority (NFRA) in 2018 as an independent audit quality regulator for listed companies created a parallel quality oversight mechanism alongside ICAI's peer review programme.

Common Findings in ICAI Peer Reviews

Documentation Deficiencies

The most prevalent finding category. Audit files frequently lack: written audit plans documenting the assessed risks and planned responses; evidence of substantive testing procedures actually performed; review documentation (sign-off sheets showing work was reviewed, reviewer's findings and resolution); and management letter drafts and final versions.

Independence Documentation Gaps

Firms frequently lack documented independence confirmations from partners and staff for audit clients — particularly for listed company audits where the independence requirement is most stringent. Annual independence declarations, documentation of financial interest checks, and records of the firm's assessment of independence threats are often missing or superficial.

Weak or Absent Engagement Acceptance Procedures

Many firms have no documented client acceptance process — they accept clients based on relationship and revenue without formally assessing client integrity, identifying potential independence issues, or confirming the firm has the competence to perform the engagement. The SQC 1 requirement for documented engagement acceptance is consistently under-implemented.

Inadequate EQC Review for High-Risk Engagements

Engagement Quality Control (EQC) review — the independent partner review of a high-risk engagement before the audit report is issued — is required by SQC 1 for listed company audits and other specified categories. Many firms either do not conduct EQC reviews or conduct them without adequate documentation of the EQC reviewer's independent assessment.

CPE and Training Records

Firms frequently cannot demonstrate that their partners and staff have met ICAI's Continuing Professional Education (CPE) requirements — either because the records are not maintained, or because CPE is treated as an ICAI compliance exercise rather than a genuine quality control mechanism linked to the firm's specific engagement competence requirements.

Why N D Savla & Associates as Your Peer Reviewer

• Deep audit practice foundation. Effective peer review requires a Peer Reviewer who understands audit practice from the inside. Our extensive audit and assurance practice — covering statutory audits, internal audits, income tax audits, and GST audits — provides the practice depth that effective peer review requires.
• Independence and objectivity. Our peer review findings reflect what we found — not what the Practice Unit wants to hear. We apply the same professional scepticism and evidence-based assessment methodology to peer review that we apply to our own audit engagements. Our findings are reported clearly, supported by specific observations, and accompanied by constructive recommendations for improvement.
• Standards expertise. Our team maintains current expertise across the complete SA framework, including the Ind AS-specific audit considerations for companies that have adopted Ind AS. This breadth ensures that the peer review covers all relevant standards, not just the commonly reviewed ones.
• Pre-review readiness advisory. For Practice Units approaching mandatory peer review for the first time — or firms that have received adverse findings in a prior peer review — we offer a pre-review readiness assessment. We review the firm's quality control documentation and a sample of recent engagement files before the formal peer review, identify gaps, and advise on remediation steps.
• Confidentiality. Peer review involves access to the Practice Unit's audit files, client information, and internal quality control records. We maintain absolute confidentiality regarding all information obtained during a peer review engagement — consistent with ICAI's peer review confidentiality requirements and our own professional ethics obligations.

Frequently Asked Questions — ICAI Peer Review