Bank Audit & IRAC Norms: Provisioning & LFAR for IIBF 2026

A rigorous bank audit is what gives depositors, regulators and investors confidence in a bank's reported numbers, and the IIBF Certified Accounting and Audit Professional paper examines it in depth. Bank audit is a specialised discipline because banking accounting — especially the recognition of bad loans and their provisioning — follows prudential rules unique to the sector. This guide covers IRAC norms, provisioning, the audit framework and key reporting duties.

IRAC Norms and Asset Classification

The heart of bank audit is the Income Recognition and Asset Classification (IRAC) framework. Under it, a loan becomes a Non-Performing Asset (NPA) when interest or principal remains overdue for more than 90 days. Once an account is an NPA, the bank must stop recognising interest income on an accrual basis and may book it only on actual recovery — a prudential safeguard against inflating profits with uncollectable interest.

NPAs are further classified by the length and severity of default. A sub-standard asset is one that has remained an NPA for up to twelve months; a doubtful asset has stayed sub-standard beyond twelve months; and a loss asset is one identified as uncollectable, where loss has been recognised but the amount not yet written off. Special mention accounts (SMA-0, SMA-1, SMA-2) flag early stress before the NPA stage. For the exam, these classification timelines are near-certain questions, so memorise them precisely. Practise NPA classification scenarios with our IIBF bank audit practice tests.

Provisioning and Ind AS 109 ECL

Provisioning is the cushion a bank sets aside against expected loan losses, and it rises with the severity of classification. Standard assets attract a small general provision; sub-standard assets attract a higher percentage, with an additional charge for unsecured exposures; doubtful assets attract escalating provisions on the secured portion based on the period they have remained doubtful, and full provision on the unsecured portion; and loss assets require full provisioning. Auditors verify that provisioning is computed correctly, since under-provisioning overstates both profit and capital.

The accounting world is moving towards the Expected Credit Loss (ECL) model under Ind AS 109, which requires banks to provide for losses on a forward-looking basis rather than only after default. ECL classifies exposures into stages and estimates losses using probability of default, loss given default and exposure at default. The transition to ECL is a major theme, and candidates should grasp the shift from the incurred-loss to the expected-loss approach. Reinforce the provisioning percentages with our audit terms match game.

The Bank Audit Framework

Bank audit operates through several layers. The statutory audit is conducted by external auditors appointed with RBI approval, who express an opinion on the truth and fairness of the financial statements. Concurrent audit runs alongside transactions in high-risk branches and functions, checking compliance almost in real time. Internal audit, increasingly organised as Risk-Based Internal Audit (RBIA), independently evaluates the adequacy of controls and risk management.

Other specialised audits include the information systems audit of the bank's technology environment, the credit audit of large exposures, and the stock audit of borrowers' inventory. Auditing standards issued by the relevant professional body and the RBI's master directions govern the conduct of these audits. Prudential norms underpinning the audit are issued by the Reserve Bank of India. For the exam, be able to match each audit type to its purpose and frequency. Deepen your understanding through our advanced banking and audit course.

LFAR, Fraud Reporting and Disclosures

At the year-end, statutory auditors submit a Long Form Audit Report (LFAR), a detailed questionnaire-based report covering the bank's assets, advances, and the adequacy of its systems and controls, which supplements the main audit report and is closely reviewed by the RBI. Auditors also have a duty to report suspected frauds they come across during the audit, consistent with the RBI's fraud-reporting framework and applicable company law.

Banks must make extensive disclosures in the notes to accounts — on NPAs, provisioning coverage, restructured advances, concentration of exposures and capital adequacy — so that stakeholders can assess asset quality. The Provisioning Coverage Ratio indicates how much of the gross NPAs is provided for. A bank auditor who masters IRAC norms, provisioning, the audit framework and these reporting duties protects the integrity of the financial system. Stay current on audit and accounting updates via our IIBF news tracker.

Exam Strategy and Quick Revision

For the bank audit paper, anchor your revision on the IRAC classification timelines, the provisioning percentages by asset class, and the audit-type-versus-purpose mapping. These three areas, together with the LFAR, generate most of the marks in every session.

Memorise the 90-day NPA rule, the twelve-month sub-standard-to-doubtful progression, and the shift from incurred loss to the Ind AS 109 expected-credit-loss model. Be ready to classify a given account and compute a simple provision. Pair this focused revision with regular mock practice to handle the numerical and application questions. Test yourself with a timed bank audit mock and read more on our study blog.

Conclusion

Bank audit rewards mastery of IRAC norms, provisioning percentages, the multi-layer audit framework and the LFAR. Memorise the classification timelines and the expected-credit-loss shift, since these are tested in every session, and practise classifying accounts under time pressure. Test your readiness with a timed bank audit mock and continue with our advanced banking course.