No, one chartered accountant cannot hold every audit role for the same client. A CA appointed as auditor under the Companies Act or any other statute cannot also be that entity's internal auditor. An internal auditor cannot be the same entity's tax auditor or GST auditor. These bars come from ICAI's own guidelines, so they apply even where the client is happy with the arrangement and no other law objects.
The rules sit in ICAI's Code of Ethics, Volume II (2020 edition), in the Council's guidance under clause (4) of Part I of the Second Schedule to the Chartered Accountants Act, 1949, which deals with independence. The Ethical Standards Board has added rulings on specific combinations since then. This piece sets out which pairings are blocked, which are not, and how to test a new engagement before you accept it. Positions are as checked on 15 November 2026.
Which role combinations are allowed
The table below collects the combinations practitioners ask about most. "Same entity" means the same client, and the restriction applies to the role you would hold for the same period.
| Role you already hold | Role you are offered | Position | Where it comes from |
|---|---|---|---|
| Statutory auditor under the Companies Act or any other statute | Internal auditor | Not allowed | Code, para 2.15.1.4(xii) |
| Internal auditor (employee or practising CA, individual or firm) | Tax auditor | Not allowed | Code, para 2.15.1.4(xiii) |
| Internal auditor | GST auditor | Not allowed | Code, para 2.15.1.4(xiv); ESB announcement of 28 September 2018 |
| Statutory auditor | Writing the books of account | Not allowed | Code, para 2.15.1.4(xi); ESB announcement of May 2014 |
| Statutory auditor | Compilation engagement for the same entity | Not allowed | ESB decision citing SRS 4410 |
| Statutory or tax auditor | Valuer of unquoted equity shares, where the law prohibits it (for example under the Income-tax Act and rules) | Not allowed | ESB decision, reviewed January 2017 |
| Statutory auditor | Preparing the client's BRSR | Not allowed; advisory on BRSR is permitted | ESB decision |
| Statutory auditor | Assurance provider for the client's BRSR Core | Allowed | ESB decision dated 12 July 2023 |
| Internal auditor of a company | Statutory auditor of the company's employees' PF fund | Allowed | ESB decision |
| Statutory auditor | Tax auditor | Not barred by these guidelines | No restriction in para 2.15.1.4 |
The last row trips people up in the other direction. Nothing in the Council's independence guidance stops the statutory auditor from also signing the tax audit report. The problem arises only when the internal auditor is asked to sign it.
Why the internal auditor cannot sign the tax audit report
Para 2.15.1.4(xiii) is drafted widely. It covers an internal auditor "whether working with the organization or an independently practicing Chartered Accountant", and "irrespective of being an individual Chartered Accountant or a firm". So the bar is not limited to an employee who happens to hold a certificate of practice. An outside firm engaged for internal audit is caught in exactly the same way.
The logic is simple. A tax auditor reports on the accounts and on the particulars in the tax audit report. An internal auditor has already reviewed, and often shaped, the controls and entries behind those figures. Signing the tax audit would mean reporting on your own work.
A firm might try to split the work, with the firm doing the internal audit and one partner accepting the tax audit in his own name. The Code names the firm as well as the individual, and both appointments would trace back to the same practice. Treat that structure as barred unless you have a specific clarification from ICAI for your facts.
The same reasoning applies to GST. Para 2.15.1.4(xiv) says the internal auditor of an entity cannot undertake its GST audit, and ICAI's Ethical Standards Board announcements list a separate announcement on this point dated 28 September 2018.
Statutory auditors and internal audit
Para 2.15.1.4(xii) bars an auditor "appointed by an entity under the Companies Act or any other statute" from being its internal auditor. The words "any other statute" matter. The bar reaches statutory audits of co-operative societies, trusts and other bodies whose audit is required by their own law, not just companies.
For companies, the Companies Act separately restricts the services a company's auditor may provide, and that restriction applies on top of ICAI's rule. The section 138 internal audit applicability article covers how it interacts with internal audit appointments and the Rule 13 thresholds. If you are unsure how the two roles differ in scope and reporting line, the comparison of internal audit and statutory audit sets them side by side.
Other work an audit client cannot give you
Beyond the internal audit roles, ICAI has ruled out several pieces of work for the auditor of the same entity:
- Writing the books. Para 2.15.1.4(xi) says members are not permitted to write the books of account of their auditee clients. The ESB announcements also list a May 2014 announcement prohibiting audit and accounting work together for the same entity.
- Compilation engagements. The important decisions of the Ethical Standards Board state that the statutory auditor of an entity is not permitted to take a compilation engagement for it. A compilation under SRS 4410 means assembling the financial information that you would then audit; the SRS 4410 compilation engagement guide explains what the work involves.
- Share valuation. The ESB has held that a statutory or tax auditor cannot value unquoted equity shares of the same entity. On review in January 2017 it kept the bar where a law prohibits it, citing the Income-tax Act and its rules as an example.
- Bank assignments. A bank's statutory auditor cannot, for the same financial year, take stock audits or inspection audits of that bank's branches. It also cannot take an ASM assignment for one of the bank's customers. A concurrent auditor of one bank cannot become statutory auditor of another bank that the first bank sponsors.
Personal and business links that block an audit
The same para of the Code lists relationships that stop you from auditing at all, whatever role you hold. These are checked before acceptance, not after:
- You cannot audit the financial statements of a business (not being a company) in which you are the proprietor or a partner. Where your partner or relative has a substantial interest in such a business, the Code says you should desist from the audit.
- A member who is a director simpliciter of a company is barred by the Council from auditing that company, whether or not he holds a substantial interest.
- After your tenure as a director ends, or you resign, there is a two-year cooling-off period before you can accept that company's audit (para 2.15.1.4(xv)). The ESB noted in its January 2017 review that section 141 of the Companies Act does not itself contain this bar, but ICAI kept it.
- A CA in employment cannot certify the financial statements of his employer, or of a concern under the same management, even if he holds a certificate of practice, unless a law specifically permits it.
- You cannot audit a college where you teach part time, or a trust where your partner is an employee or trustee.
- You cannot give a certificate where the client is your relative, using the definition of relative in AS 18.
Three situations worked through
These illustrations use invented clients to show how the rules apply.
The internal audit firm asked to sign the tax audit
Kapoor & Associates has been internal auditor of a textile company for FY 2025-26. In August 2026 the company asks the firm to sign the tax audit report for the same year because "you already know the books". Para 2.15.1.4(xiii) answers this directly: the firm cannot be appointed tax auditor. The company must appoint another CA. Kapoor & Associates may keep the internal audit.
The co-operative society's auditor and quarterly internal checks
CA Rao is the statutory auditor of a co-operative credit society under the State co-operative societies law. The managing committee wants him to run quarterly internal checks as well. Because the bar in para 2.15.1.4(xii) covers an auditor appointed "under the Companies Act or any other statute", he must decline the internal audit while he holds the statutory audit.
The former director and the cooling-off date
CA Shah resigned as a director of a food processing company on 30 June 2025. Two years from that date runs to 30 June 2027. She should not accept an appointment as its auditor before that period ends, even if the shareholders are keen. Check also that she holds no other disqualifying interest at the time of appointment, and that the company still fits within her 20-company audit limit.
What to check before you accept a second role
- List every role your firm and each partner already holds for the client and its group for the period in question.
- Run the new role against the table above and para 2.15.1.4 of the Code.
- For a company audit, check the Companies Act restrictions on services as well; the ICAI guidance does not replace them.
- Search the ESB's important decisions page for your exact combination, because rulings on narrow points (BRSR, PF trusts, bank assignments) are recorded there rather than in the Code.
- Record the conclusion on the acceptance file, with the paragraph or decision you relied on.
Where a combination is not covered by the Code or any recorded decision, the Code's own test still applies: members are expected to read the independence requirement more strictly than the law and not place themselves where their independence could be compromised.
