Bank Audit and Inspection: Statutory, Concurrent and RBI Norms

Every JAIIB candidate memorises ratios and journal entries, but few papers test how a bank actually gets checked from the outside — and that gap costs marks. Bank audit and inspection is the machinery that verifies whether the accounting you have studied is actually being followed on the ground, and JAIIB's Accounting and Financial Management for Bankers (AFM) paper leans on it heavily in the second half of the syllabus. Banks in India are subject to layers of scrutiny that an ordinary company never sees: statutory audit for the balance sheet, concurrent audit for daily transactions, internal inspection for operational discipline, and RBI inspection for systemic safety. Understanding who does what, how often, and what each one reports on is exactly the kind of applied knowledge examiners reward. This guide walks through the four audit types, how they interlock with the Bank Audit & Inspection chapter, and where students typically lose easy marks.

📋 The Four Layers of Bank Audit and Inspection

Bank audit and inspection is best understood as four overlapping but distinct checks, each with its own appointing authority and cadence. Statutory audit is conducted by external Chartered Accountant firms appointed with RBI's involvement (for public sector banks) or by the board (for private banks), and it certifies the annual financial statements — the balance sheet and profit and loss account — as true and fair. Concurrent audit runs almost in real time, reviewing high-risk transactions such as large cash payments, foreign exchange deals, and loan disbursements as they happen, so that errors or fraud are caught within days rather than at year-end. Internal or inspection audit is the bank's own Inspection and Audit Department examining branches periodically against internal policy and RBI guidelines, covering areas like KYC compliance, cash retention limits, and adherence to sanctioning powers. Finally, RBI inspection is the regulator's own supervisory exercise under the Banking Regulation Act, assessing capital adequacy, asset quality, management, earnings and liquidity — the well-known CAMELS framework — across the bank as a whole. Students preparing for AFM should also revisit Basic Accountancy Procedures, since every audit type ultimately checks whether these day-to-day recording procedures were followed correctly at the branch level before the numbers were rolled up into the financial statements.

💡 Exam Tip: If a question asks "which audit is continuous in nature," the answer is always concurrent audit — statutory and RBI inspection are periodic, internal audit is periodic-to-annual.

🔍 Concurrent Audit: Scope, Coverage and Why It Exists

Concurrent audit deserves special attention in AFM because examiners frequently probe its purpose versus statutory audit. It exists to plug the gap between transactions happening and their eventual annual review — a gap that, left unchecked, allows small irregularities to compound into large losses before anyone notices. RBI guidelines require banks to bring a minimum percentage of business (typically a large share of advances, deposits and non-fund exposures) under concurrent audit coverage, with branches selected based on risk categorisation rather than uniformly. The auditors — who may be external CA firms or, in some banks, retired bank officials with domain expertise — verify each day's or each week's high-value transactions almost as they occur: cash transactions above threshold limits, inter-branch reconciliation entries, government business, treasury deals, and advances sanctioned under delegated powers. Findings are compiled into periodic reports placed before the Audit Committee of the Board (ACB), not merely filed away, which keeps the loop closed between detection and corrective action. This is also where the discipline learned in Maintenance of Cash, Subsidiary Books and Ledger becomes directly examinable — a concurrent auditor's first port of call is almost always the cash book and the subsidiary registers, because that is where cash-handling lapses surface fastest.

⚠️ Common Mistake: Students often confuse concurrent audit with internal inspection because both are "internal" to the bank's oversight structure. Remember: concurrent audit is transaction-level and near-continuous; internal inspection is branch-level and periodic (usually annual or once every two years for lower-risk branches).

🏦 Statutory Audit and the Long Form Audit Report

Statutory audit is what most people picture when they hear "bank audit" — external Chartered Accountants examining the annual accounts and issuing an opinion. What makes bank statutory audit distinctive, and what AFM specifically tests, is the Long Form Audit Report (LFAR) that accompanies the main audit opinion. The LFAR is a structured questionnaire-style report where the auditor comments on matters the standard audit report does not cover in detail: asset classification and provisioning adequacy, the working of internal control systems, compliance with RBI's prudential norms, and the quality of the advances portfolio. Because provisioning is central to the LFAR, students should be comfortable with how provisioning interacts with the topics covered in provisions vs reserves in bank books, since a statutory auditor's qualification often hinges on whether provisions held match the classification actually warranted by the account's conduct. Statutory auditors also verify that income recognition follows the prudential norms correctly — which is exactly why understanding interest reversal on NPA accounts matters well beyond a standalone topic; it is one of the first things a statutory auditor tests when an account slips into a non-performing category. Branch auditors for public sector banks are allotted centrally, while private and foreign banks appoint their own subject to board and RBI approval processes.

📌 Remember: The LFAR is a supplementary report to the main audit report, not a replacement — the bank's financial statements are still certified separately under the main statutory audit opinion.

📊 RBI Inspection and Risk-Based Supervision

RBI inspection operates at a different altitude from the other three — it examines the bank as a single regulated entity rather than transaction-by-transaction or account-by-account. Under the Risk-Based Supervision (RBS) framework, RBI inspectors assess a bank's overall risk profile: capital adequacy against the CRAR norms, asset quality trends, the robustness of internal audit and controls, earnings sustainability, liquidity coverage, and — crucially — the management's own capacity to identify and manage risk (the "M" in CAMELS). Where the LFAR and concurrent audit look backwards at what has already happened, RBI inspection increasingly looks forward, evaluating whether the bank's systems can catch tomorrow's problem before it becomes today's loss. RBI inspectors also cross-check whether the bank's own inspection and audit machinery — including how transactions get recorded in the first place through back office functions — is operating with the rigour RBI expects, since weak back-office controls are one of the most common root causes flagged in supervisory findings. Banks with listed securities carry an additional layer of disclosure obligations enforced through the exchanges themselves; the mechanics of how stock exchanges and depositories in India enforce continuous disclosure is covered on the IEIFS side of the syllabus but is worth knowing as context for why listed banks face scrutiny beyond RBI alone. Serious supervisory findings can trigger RBI's Prompt Corrective Action framework, restricting a bank's normal business activity until risk metrics are restored to acceptable levels.

A quick way to keep these straight for the exam: statutory audit certifies the numbers, concurrent audit watches the numbers being made, internal inspection checks whether branch processes follow the rulebook, and RBI inspection judges whether the whole institution is safe. Every layer ultimately traces back to whether the basic accounting groundwork — vouching, ledger posting, reconciliation — was done correctly at the point of origin, which is why AFM treats audit and inspection as an extension of accounting rather than a separate subject.

🧠 Practice MCQs: Bank Audit and Inspection

Want chapter-wise mock tests with 100+ MCQs? Start practising free →

❓ Frequently Asked Questions

For JAIIB AFM, bank audit and inspection is less about memorising four labels and more about seeing how they form a continuous chain of accountability — from the entry made at a branch counter, through concurrent review, into the annual statutory opinion, and finally under the regulator's own supervisory lens. Revisit the Bank Audit & Inspection chapter alongside the related accounting fundamentals, keep the RBI's own Master Directions in view for the latest supervisory framework, and work through the AFM topic hub for related chapters. Ready to test yourself under exam conditions? Start a free JAIIB course chapter test today and see exactly where your audit and inspection concepts need reinforcement before the real exam.