Companies Auditor’s Report Order 2020: Complete Guide for Companies

Key Takeaways

• CARO 2020 requires auditors to report on specific financial, operational, and compliance matters for covered companies.
• The Order contains 21 reporting clauses covering assets, inventory, loans, statutory dues, borrowings, fraud, related-party transactions, internal audit, CSR, and other matters.
• CARO 2020 applicability depends on the company’s legal status, financial position, activities, and applicable exemptions.
• Banking companies, insurance companies, Section 8 companies, One Person Companies, and small companies generally fall outside CARO 2020.
• Certain private companies can qualify for exemption when they satisfy all prescribed conditions relating to capital, revenue, borrowings, and ownership.
• Companies should maintain accurate records for assets, inventory, loans, statutory dues, borrowings, related-party transactions, and other relevant areas.
• Companies should review CARO requirements before the statutory audit and resolve documentation gaps or financial discrepancies promptly.

What is the CARO Report?

The Companies (Auditor’s Report) Order, 2020, requires auditors to report on specific matters in addition to their primary audit opinion. Section 143(11) of the Companies Act, 2013, authorizes the Central Government to require auditors to report on specified matters.

The CARO report forms part of the auditor’s reporting framework for companies covered by the Order. It does not replace the statutory auditor’s main report on the financial statements.

Instead, CARO 2020 requires the auditor to provide additional comments on matters specified under the Order. These comments help shareholders and other users understand important aspects of the company’s financial position, controls, compliance, and operations.

What Are the Key Features of CARO 2020?

CARO 2020 introduced several important changes to the earlier reporting framework. The Order expanded the number of reporting areas and increased the level of information auditors must provide.

The key features include:

• 21 reporting clauses: CARO 2020 contains 21 main reporting areas.
• Broader reporting requirements: The Order covers assets, inventory, loans, statutory dues, borrowings, fraud, related parties, CSR, and other matters.
• Greater disclosure: Auditors must provide more specific information about identified issues.
• Fraud-related reporting: The Order requires auditors to report specified matters relating to fraud.
• Consolidated financial statements: Clause 3(xxi) requires reporting on qualifications or adverse remarks in CARO reports of companies included in consolidated financial statements.
• Risk-focused reporting: Several clauses require auditors to examine financial and operational matters that can indicate significant risks.

ICAI’s Guidance Note on CARO 2020 provides detailed guidance for auditors on applying these reporting requirements. 

Why is CARO Crucial?

1. Investor Confidence: By providing a clear, unbiased picture of a company’s financial performance and risks, CARO enhances investor confidence. It ensures that investors are not blindsided by misleading information, which is especially important in today’s volatile markets.
2. Fraud Detection: One of CARO’s most vital roles is its fraud detection capacity. Over the years, the audit framework has helped uncover large-scale discrepancies in financial records. Fraud detection is crucial in a business environment where the scale and complexity of financial crimes are ever-increasing.
3. Regulatory Compliance: The Companies Auditor’s Report Order ensures that businesses comply with Indian corporate laws including the Companies Act, Income Tax Act, Goods and Services Tax (GST), and others. This helps maintain regulatory harmony, and statutory adherence at all levels.
4. Governance and Ethics: CARO promotes ethical governance by urging companies to maintain proper records and adhere to reporting guidelines. It encourages long-term sustainability and good corporate citizenship.

Applicability of CARO: Who Must Comply?

CARO 2020 applies to a wide spectrum of companies based on their size, revenue, and nature of business. It is essential to understand the applicability as it dictates which entities need to comply with this comprehensive reporting framework.

Entities Subject to CARO:

1. Listed Companies: All publicly listed companies are subject to  The Companies Auditor’s Report Order due to their public accountability and the need for stringent financial scrutiny.
2. Private Limited Companies: If a private company meets any of the following criteria, it too is required to comply with CARO:

• Paid-up capital + reserves > ₹1 crore.
• Annual revenue > ₹10 crore.
• Outstanding borrowings > ₹1 crore from banks or financial institutions.

3. Non-Banking Financial Companies (NBFCs): NBFCs, with their critical role in financial intermediation, are mandated to follow CARO guidelines, especially in light of their involvement in public financial dealings.
4. Other Companies: Any company exceeding the above thresholds, regardless of its industry, falls under CARO’s jurisdiction.

Exemptions under the CARO report

Not all companies are required to comply with CARO. The following entities are exempt:

• One Person Companies (OPCs): Defined under Section 2(62) of the Companies Act, these are excluded due to their small scale of operations.
• Small Companies: Companies with turnover ≤ ₹2 crore and paid-up capital ≤ ₹50 lakh.
• Banking and Insurance Companies: These are governed by specific audit frameworks outside CARO’s scope.
• Section 8 Companies: Non-profit organizations, which are exempt due to their nature of operations.

Key Requirements of the CARO Report: 21 Clauses in Detail

The Companies Auditor’s Report Order 2020 requires auditors to examine 21 specific clauses, each aimed at addressing key operational and financial practices. The clauses cover everything from fixed assets and inventory to fraud and statutory dues.

Major Clauses in CARO 2020:

1. Fixed Assets: Auditors must ensure proper maintenance of records and verify ownership of immovable properties like land and buildings.
2. Inventory: Discrepancies in inventory, especially where valuation exceeds 10%, must be addressed, with auditors verifying inventory management practices.
3. Loans and Advances: Default in loan repayments and irregularities in loans to related parties must be disclosed.
4. Fraud Detection: Auditors are tasked with identifying fraud exceeding ₹1 crore and verifying the company’s actions in response to fraudulent activities.
5. Statutory Dues: CARO mandates that auditors verify payment of statutory dues such as GST, PF, and ESI. Delays or defaults must be clearly reported.

Key Data Points from 2025:

• ₹3,200 crore worth of fraudulent activity was reported during CARO audits, with 35% of these frauds linked to non-banking financial companies (NBFCs).
• 20% of companies reported issues related to inventory management and statutory dues, indicating significant areas of concern in corporate governance.

Auditor Responsibilities Under CARO

The role of an auditor in The Companies Auditor’s Report Order (CARO) compliance is crucial. Auditors must go beyond basic compliance, using forensic accounting techniques to identify potential risks and fraudulent activities.

Auditor’s Key Responsibilities:

• Evaluation: Thoroughly address each of the 21 clauses, examining every financial detail.
• Verification: Conduct physical verification of assets and inventory to match company records.
• Fraud Detection: Use advanced tools to uncover fraudulent activities and report discrepancies.
• Compliance Monitoring: Ensure all companies comply with tax laws, labor laws, and other regulatory requirements.
• Risk Reporting: Identify financial misstatements and operational risks to prevent larger financial fallout.

Common Issues & Challenges in CARO Compliance

Despite its importance, CARO compliance is not without challenges. Both companies and auditors face several hurdles, ranging from poor record-keeping to management resistance.

Key Challenges:

1. Poor Record-Keeping: Many companies fail to maintain proper documentation, making it difficult for auditors to verify the accuracy of their reports.
2. Awareness Gaps: Smaller firms often lack a complete understanding of CARO’s requirements, leading to unintentional non-compliance.
3. Time Constraints: Auditors often face tight deadlines, which can affect the thoroughness of the audit process.
4. Resistance from Management: In some instances, management may withhold crucial information, obstructing the audit process.

Conclusion

The Companies (Auditor’s Report) Order, 2020 strengthens corporate reporting by requiring auditors to address specific financial, operational, and compliance matters. It operates alongside the statutory audit requirements under the Companies Act, 2013.

CARO 2020 applicability depends on the company’s legal status, financial position, and the exemptions prescribed under the Order. Companies should assess the applicable conditions carefully rather than assuming that CARO applies only to large or listed companies.

The CARO report gives shareholders and other stakeholders additional information about matters that can affect a company’s financial and operational position. Companies should therefore treat CARO requirements as an important part of their overall financial reporting and governance processes.