# Internal Financial Controls (IFC) under Companies Act

## Definition of IFC

Definition same as Internal Control, with an additional point:

Prevention & detection of frauds (extra element)

Thus IFC covers:

1. Reliability of FR

2. Effectiveness & efficiency of operations

3. Compliance with applicable laws & regulations

4. Safeguarding of assets

5. Prevention & detection of frauds (extra)

## Companies Act — Reporting on IC

Section	Nature of Responsibility
Section 134(5)(e)	For listed companies, Directors' Responsibility Statement shall state that Directors had laid down Internal Financial Controls (IFC) and that such IFC are adequate and operating effectively
Section 143(3)(i)	Auditor's report shall state if company has adequate IFC and also on operating effectiveness of such IFC
Section 177(4)(viii)	Every Audit Committee shall act per terms specified by Board, including evaluation of IFC and risk management systems
Section 149(8)	Per Code for Independent Directors — independent directors shall satisfy themselves on integrity of financial info and that financial controls & risk management systems are robust and defensible

## Exemption from Section 143(3)(i)

The reporting requirement on IFC does NOT apply to a private company which:

Is a One Person Company (OPC) or small company; OR
Has:
Turnover < ₹50 crores as per latest audited FS; AND
Aggregate borrowings from banks/FIs/body corporate at any point during FY < ₹25 crores

> Both turnover AND borrowing conditions must be satisfied for exemption under the second limb.

## Distinction Between IFC and ICFR

Aspect	Internal Financial Control (IFC)	Internal Control over Financial Reporting (ICFR)
Scope	Wider	Narrower
Covers	FR + Operations + Compliance + Safeguarding of assets + Prevention/detection of fraud	Only FR reliability
Use	Policies & procedures of the entity	Where auditor must express opinion on effectiveness of ICFR
Opinion	—	In addition to and distinct from the opinion on FS

> Memory aid: IFC = Wider umbrella; ICFR = Specific to financial reporting only.

## Key Practical Implications

1. Listed companies: Directors must lay down IFC AND auditor must opine on adequacy + operating effectiveness

2. Eligible private companies: Section 143(3)(i) exemption removes IFC opinion requirement

3. All companies with Audit Committees: Must evaluate IFC and risk management systems

4. The auditor's opinion on ICFR is a separate report appended to the main audit report

Worked example

### Example 1

Example 1 — Exemption Test:

A Pvt Ltd has turnover ₹45 crores and aggregate borrowings of ₹20 crores.

Turnover < ₹50 crores ✓
Borrowings < ₹25 crores ✓

→ Exempt from Section 143(3)(i) IFC reporting.

### Example 2

Example 2 — Failed Exemption:

B Pvt Ltd has turnover ₹40 crores but borrowings ₹30 crores.

Borrowing condition FAILED (>₹25 cr)

→ NOT exempt; auditor must report on IFC.

### Example 3

Example 3 — Listed Company:

XYZ Ltd is listed on BSE. Directors must lay down IFC and state in Directors' Responsibility Statement [Section 134(5)(e)] that IFC is adequate and operating effectively. Auditor independently opines under Section 143(3)(i).

### Example 4

Example 4 — IFC vs ICFR:

ABC Ltd's IFC covers prevention of payroll fraud, compliance with GST law, safeguarding of inventory, and reliable financial reporting. ICFR for ABC Ltd is restricted only to controls ensuring reliable financial reporting (e.g., revenue recognition controls, cut-off controls).

⚠️ Common exam mistakes

Forgetting that IFC includes 'prevention and detection of frauds' as an extra element compared to general IC
Confusing IFC (wider) with ICFR (narrower) — IFC has 5 dimensions, ICFR is only about FR
Applying Section 143(3)(i) exemption when only ONE of the two conditions (turnover/borrowings) is met — BOTH must be satisfied
Forgetting that the exemption applies only to PRIVATE companies (not subsidiaries/holding of public company)
Failing to note that the auditor's IFC opinion is separate from and additional to the opinion on FS
Confusing 'turnover' (P&L based) with 'paid-up capital' or other thresholds

Bare-Act text Sections 134(5)(e), 143(3)(i), 149(8), 177(4)(viii) · Companies Act, 2013 · click to expand

Section 143(3)(i) of the Companies Act, 2013: The auditor's report shall also state — whether the company has adequate internal financial controls with reference to financial statements in place and the operating effectiveness of such controls. Section 134(5)(e): In case of a listed company, the directors' responsibility statement shall state that the directors had laid down internal financial controls to be followed by the company and that such internal financial controls are adequate and were operating effectively.

Now that you've read this — what's next?

Move from understanding → mastery in 3 clicks. Each option below picks up from this lesson's topic.

🔥 Drill 5 Qs on this → ✍️ Adaptive practice →

Internal Financial Controls (IFC) and ICFR - Companies Act Reporting

Worked example

⚠️ Common exam mistakes