Joint Audit of Bank Branches: SA 299 for CAAP Candidates

When a public sector bank appoints more than one audit firm to sign off on the same set of financial statements, that arrangement is a joint audit of bank branches (and, at the central level, a joint audit of the bank as a whole). For CAAP candidates this is one of the most practical topics in the syllabus, because almost every large Indian bank statutory audit today is conducted this way, and examiners routinely test the division of responsibility between joint auditors rather than the mechanics of the audit itself.

🏦 What a Joint Audit Means for Bank Branches

A joint audit exists when two or more audit firms are appointed together to express a single audit opinion on one set of financial statements. It is different from a group audit, where one principal auditor relies on the reports of component auditors, and different from the parallel structure used to prepare the consolidated financial statements of banks, where a group auditor consolidates figures reported by others.

In banking, joint audits are almost always driven by scale. A single audit firm cannot realistically cover thousands of branches, multiple business verticals, and a large loan book within the statutory reporting timeline. Splitting the engagement among two, three or more firms who together sign one report lets the bank get adequate branch coverage without any single firm carrying the whole exercise alone.

The candidate should also connect this to the broader chapter on bank audit and various types of audits in banks, since a joint statutory audit sits alongside concurrent, revenue and stock audits as one more layer of assurance that a bank builds into its overall control structure. The joint auditors ultimately still rely on the basic accounting records built up through the ordinary accounting process at branch and head office level.

📋 SA 299 and the Legal Basis for Joint Audits

The governing standard is SA 299, "Joint Audit of Financial Statements," issued by the Institute of Chartered Accountants of India. It applies whenever the auditor's report is signed by more than one audit firm for the same engagement, which is exactly the position in most large bank statutory audits.

SA 299 requires the joint auditors, before starting fieldwork, to discuss and document in writing how the audit work will be divided among them. This division is normally decided with reference to identifiable areas, branches, or heads of accounts rather than left informal, precisely so that if a dispute arises later, each firm can point to what it was and was not responsible for.

Banks do not choose joint audits purely for convenience — the framework for appointing multiple audit firms as Statutory Central Auditors is set by the Reserve Bank of India's guidelines on appointment of statutory auditors of commercial banks, which push larger banks toward multiple auditors rather than a single firm. A candidate answering a CAAP question on this topic should be able to name SA 299 as the auditing standard and RBI's appointment guidelines as the regulatory trigger, and keep the two separate in the answer.

💡 Exam Tip: If a question asks which standard governs joint audits, the answer is SA 299 — not SA 210, SA 230 or SA 600, which deal with engagement terms, documentation and using another auditor's work respectively.

🔀 Dividing the Audit Work Among Joint Auditors

Once the division of work is agreed, each joint auditor is responsible only for the work specifically allocated to them. A joint auditor is not required to review the work performed by another joint auditor on the portion allotted to that firm, and is not expected to visit branches or verify records outside their own share of the engagement.

Certain matters, however, are treated as the joint responsibility of every auditor regardless of how the branches were split. These include the overall audit plan, matters of common concern that affect the financial statements as a whole, compliance with the applicable Standards on Auditing, obtaining and evaluating information from the bank's management on issues that go beyond individual branches, reviewing the overall presentation and disclosures in the financial statements, and making sure the final audit report complies with the relevant legal and regulatory requirements.

This split — individual responsibility for allocated work, joint responsibility for the shared decisions — is the single most tested idea in this area, and candidates should be able to give at least two examples of each category in an exam answer.

⚠️ Common Mistake: Students often assume joint auditors must cross-check each other's branch files. SA 299 explicitly does not require this; each firm is entitled to rely on the work of the other joint auditors for the areas allocated to them, unless something comes to its attention that raises doubt.

⚖️ Joint and Several Liability Explained

Liability under a joint audit is not uniform across the whole engagement. For work that was specifically divided among the auditors, each joint auditor is liable only for their own allocated portion — not for the branches or areas covered by another firm.

For everything that falls into the "joint responsibility" bucket described above — the overall audit conclusion, compliance with auditing standards, and the matters of common concern — all the joint auditors are jointly and severally liable. In practice this means if the final opinion turns out to be wrong because of a failure in a jointly-owned area, every signing firm can be held responsible, not just the one that happened to draft that section of the report.

Where one joint auditor disagrees with the others on a matter in the financial statements, that auditor is entitled — and expected — to express the disagreement separately in the audit report, rather than being forced to sign an opinion they do not agree with. This protects individual firms from inheriting liability for a conclusion they specifically objected to.

📝 Reporting, Disagreement and Documentation in a Joint Audit

Because several firms are involved, coordination becomes as important as the fieldwork itself. SA 299 expects joint auditors to communicate with each other on a timely basis throughout the engagement — not just at the planning stage — so that issues found by one firm in a shared area reach the others before the report is finalised.

This is closely linked to the requirements a CAAP candidate would already have studied under audit documentation and working papers: each joint auditor still maintains their own working papers for the portion they audited, and those papers are not automatically shared with the other firms unless there is a specific reason to do so. Similarly, where income leakage or short recoveries are identified during a joint statutory audit, the underlying testing draws on the same techniques covered under revenue audit in banks, applied firm-by-firm to the branches each auditor covers.

At the reporting stage, the joint auditors issue one audit report, but if consensus cannot be reached on a specific matter, the report should reflect that a joint auditor is expressing a separate opinion or qualification, along with the reasons. Candidates preparing case-study answers should remember that silence from a dissenting auditor is not an acceptable substitute for a documented, reasoned disagreement.

📌 Remember: Joint responsibility covers the audit plan, compliance with auditing standards, and matters of common concern; individual responsibility covers only the specific branches or areas allocated to that auditor.

Auditors and audit committees tracking current expectations on this framework should keep an eye on IIBF news and regulatory updates, since RBI periodically revises its guidelines on the number and rotation of statutory auditors for banks above certain asset sizes.

It is also worth noting how this connects to risk oversight beyond accounting: large banks that run derivative books rely on separate legal and operational safeguards such as bilateral netting of derivatives, which reduces counterparty exposure independently of how the statutory audit itself is structured — a useful reminder that audit assurance and risk mitigation are two different layers of control. For the accounting fundamentals that every joint auditor still verifies branch by branch, revisit accounting an introduction before attempting the practice questions below.

For the full regulatory text on joint engagements, refer to the Institute of Chartered Accountants of India's Standards on Auditing, and cross-check appointment norms against the Reserve Bank of India's published guidelines at rbi.org.in.

🧠 Practice MCQs: Joint Audit of Bank Branches

Want chapter-wise mock tests with 100+ MCQs? Start practising free →

Joint audits are a recurring, practical topic in the CAAP syllabus precisely because they mirror how India's larger banks are actually audited today. Once you can separate "individually allocated work" from "jointly owned responsibility" and state the liability position for each, most exam questions on this area become straightforward. Reinforce it with a full CAAP practice test, and browse the Certified Accounting and Audit Professional tag hub for the rest of the syllabus.