How to conduct an audit in Pakistan

Auditing is a critical process that ensures the accuracy, reliability, and transparency of a business’s financial information. In Pakistan, conducting an audit is not just a regulatory requirement for companies under the Companies Act, 2017, but also a key tool for strengthening corporate governance, managing risk, and building stakeholder trust.

This comprehensive guide outlines the audit process in Pakistan, its legal framework, audit types, procedures, reporting standards, and best practices for businesses and auditors alike.

Table of Contents

1. Introduction

2. What is an Audit?

3. Types of Audits in Pakistan

4. Legal Framework for Auditing in Pakistan

5. Who Requires an Audit?

6. Appointment of Auditors

7. Key Audit Standards and Frameworks

8. Pre-Audit Preparation

9. Understanding the Entity’s Operations

10. Risk Assessment and Internal Controls Review

11. Substantive Testing and Verification

12. Gathering Audit Evidence

13. Audit Documentation and Working Papers

14. Drafting the Audit Report

15. Unqualified vs Qualified Audit Opinions

16. Auditor’s Responsibilities Under Law

17. Compliance with SECP and FBR Requirements

18. Common Audit Challenges in Pakistan

19. The Role of Technology in Auditing

20. Internal Audits vs External Audits

21. Importance of Annual Audits for SMEs

22. Auditing Non-Profit and Public Sector Entities

23. Role of Chartered Accountants in Pakistan

24. Conclusion

25. SEO Title and Meta Description

1. Introduction

An audit is an independent examination of financial records, internal controls, and transactions to ensure compliance with applicable laws and standards. In Pakistan, audits are essential for legal compliance, investor confidence, and strategic business decision-making.

2. What is an Audit?

An audit involves a systematic review of an organization’s financial statements and operations to verify that they present a true and fair view of its financial position. It helps detect errors, fraud, and non-compliance with accounting standards.

3. Types of Audits in Pakistan

• Statutory Audit – Mandatory under the Companies Act, 2017 for all public companies and private companies exceeding turnover thresholds

• Internal Audit – Conducted periodically to improve operations and reduce risk

• Tax Audit – Conducted by FBR to verify tax compliance

• Forensic Audit – Used to investigate suspected fraud or financial misconduct

• Compliance Audit – Ensures adherence to industry-specific regulations and standards

4. Legal Framework for Auditing in Pakistan

Auditing in Pakistan is primarily governed by:

• Companies Act, 2017

• Code of Corporate Governance

• Income Tax Ordinance, 2001

• Sales Tax Act, 1990

• SECP Regulations

• International Standards on Auditing (ISAs) issued by ICAP

5. Who Requires an Audit?

Mandatory audit requirements apply to:

• All public companies

• Private companies with capital ≥ PKR 1 million or turnover ≥ PKR 10 million

• NGOs, societies, and trusts receiving public funding or registered under specific acts

• Entities registered under SECP or filing audited returns with FBR
  Banks, insurance companies, and listed firms must also conduct audits under their respective regulatory regimes.

6. Appointment of Auditors

Auditors are appointed by:

• The Board of Directors (in the first annual general meeting)

• Shareholders (by passing an ordinary resolution)

• The SECP (in cases of non-compliance or failure to appoint)
  Only practicing Chartered Accountants registered with ICAP can conduct statutory audits in Pakistan.

7. Key Audit Standards and Frameworks

Audit firms in Pakistan follow:

• International Standards on Auditing (ISAs)

• IFRS and IAS for financial reporting

• ICAP Code of Ethics

• SECP audit directives
  These standards ensure objectivity, independence, and high audit quality.

8. Pre-Audit Preparation

Before the audit begins, the auditor and company should:

• Define the scope of the audit

• Sign an engagement letter

• Discuss timelines, fees, and deliverables

• Ensure availability of previous financial statements and internal control documents

9. Understanding the Entity’s Operations

Auditors begin by gaining a thorough understanding of:

• Nature of the business

• Industry practices

• Regulatory environment

• Internal control systems
  This helps in designing effective audit procedures and identifying risk areas.

10. Risk Assessment and Internal Controls Review

A critical part of auditing is evaluating:

• The design and effectiveness of internal controls

• Areas prone to material misstatement

• Fraud risk indicators
  Auditors document this through walkthroughs, interviews, and control testing.

11. Substantive Testing and Verification

Auditors conduct substantive tests to verify transactions and balances, including:

• Sales and purchase invoices

• Bank statements and reconciliations

• Inventory counts

• Fixed asset registers

• Loan and lease agreements

12. Gathering Audit Evidence

Reliable audit evidence must be:

• Sufficient and appropriate

• From both internal and external sources

• Documented with workpapers and confirmations
  The more risk involved, the more evidence the auditor must gather.

13. Audit Documentation and Working Papers

Audit working papers include:

• Audit programs and checklists

• Risk assessments

• Summary of test results

• Adjustments and findings
  Proper documentation supports the audit opinion and meets regulatory inspection requirements.

14. Drafting the Audit Report

Once procedures are complete, the auditor prepares a report that includes:

• Auditor’s opinion (unqualified, qualified, adverse, disclaimer)

• Notes to the financial statements

• Basis of opinion and scope of audit
  This report is attached to the company’s annual financial statements.

15. Unqualified vs Qualified Audit Opinions

• Unqualified Opinion – Indicates the financial statements present a true and fair view

• Qualified Opinion – Indicates limitations or exceptions in specific areas

• Adverse Opinion – Suggests major misstatements

• Disclaimer of Opinion – Issued when the auditor cannot form an opinion due to lack of evidence

16. Auditor’s Responsibilities Under Law

An auditor in Pakistan must:

• Maintain independence and professional skepticism

• Report fraud or financial irregularities

• Ensure compliance with laws and accounting standards

• Retain audit files for regulatory review
  Failure to comply may result in penalties, suspension of license, or legal action.

17. Compliance with SECP and FBR Requirements

Companies must file:

• Audited financial statements annually with SECP

• Tax returns and audit reports with FBR
  Auditors must also file Form 29 and ensure compliance with Section 223 of the Companies Act and FBR’s audit clauses.

18. Common Audit Challenges in Pakistan

• Lack of proper documentation by SMEs

• Incomplete record-keeping

• Cash-based transactions without traceability

• Resistance from management during fieldwork

• Inconsistent application of IFRS or GAAP
  Training, communication, and digital tools help overcome these challenges.

19. The Role of Technology in Auditing

Technology is transforming audits through:

• Cloud accounting integration

• Data analytics and automation

• E-invoicing systems (linked to FBR)

• Remote audit procedures via cloud platforms
  Audit firms in Pakistan are increasingly adopting tech to improve accuracy and efficiency.

20. Internal Audits vs External Audits

• Internal Audit is conducted by in-house or outsourced teams to assess controls and operations

• External Audit is conducted independently and is legally mandated
  Both are important for risk management, but only external audits provide legal assurance to shareholders and regulators.

21. Importance of Annual Audits for SMEs

Even if not legally required, SMEs benefit from voluntary audits as they:

• Improve credibility with banks and investors

• Identify inefficiencies and fraud risks

• Help in budgeting and forecasting

• Build trust with customers and suppliers

22. Auditing Non-Profit and Public Sector Entities

Auditing is equally vital in the non-profit and government sectors. Auditors ensure:

• Donor funds are properly utilized

• Grants are accounted for transparently

• Public funds are not misappropriated
  Pakistan’s Auditor General oversees public sector audits, while NGOs often engage external Chartered Accountants.

23. Role of Chartered Accountants in Pakistan

Chartered Accountants play a vital role in Pakistan’s auditing landscape. Regulated by ICAP, they are licensed to:

• Conduct statutory audits

• File assurance reports

• Sign financial statements

• Report fraud to regulators
  Their expertise ensures that audit reports carry credibility and legal standing.

24. Conclusion

Auditing is not merely a compliance formality but a strategic necessity for financial transparency and stakeholder confidence. Whether you’re a listed company, an SME, or a non-profit, conducting audits in line with Pakistan’s legal framework and global standards is essential.

At Sterling.pk, we deliver high-quality, independent audit services tailored to the needs of modern Pakistani businesses. Our Chartered Accountants are equipped to help you meet compliance, reduce risk, and unlock insights from your financial data.