Audit Requirements for Private Companies in Pakistan: SECP SOP

Standard Operating Procedure: Audit Requirements for Private Companies in Pakistan

This Standard Operating Procedure (SOP) outlines the regulatory obligations for private limited companies operating under the Companies Act, 2017, in Pakistan. Compliance with audit requirements is mandatory for maintaining the "Active" status of a company with the Securities and Exchange Commission of Pakistan (SECP) and for filing accurate tax returns with the Federal Board of Revenue (FBR). Failure to adhere to these statutory requirements can lead to heavy penalties, daily fines, and potential legal action against company directors.

1. Regulatory Compliance Checklist

Phase 1: Statutory Audit (SECP Compliance)

• Determine Audit Applicability: Verify if the company meets the criteria for audit exemption (e.g., Single Member Companies or specific small private companies as defined by the SECP). If not exempt, an audit is mandatory.
• Appointment of Auditor: Ensure a qualified auditor (Chartered Accountant or Cost and Management Accountant) is appointed by the shareholders in the Annual General Meeting (AGM) within 120 days of the company's incorporation or within 30 days of a casual vacancy.
• Form 35/36 Filing: Ensure Form 35 (Notice of Appointment of Auditor) is filed with the SECP registrar within 14 days of the appointment.
• Record Keeping: Maintain books of accounts as per Section 220 of the Companies Act, 2017, for a minimum period of 10 years.
• Financial Statements Preparation: Prepare the Statement of Financial Position, Statement of Profit or Loss, Statement of Comprehensive Income, Statement of Changes in Equity, and Cash Flow Statement in accordance with IFRS/IFRS for SMEs.

Phase 2: Tax Audit (FBR Compliance)

• Tax Registration: Ensure the company is registered for Sales Tax (if applicable) and Income Tax.
• Maintenance of Tax Records: Archive all transactional documents, including purchase invoices, sales tax invoices, bank statements, and tax deduction certificates (Withholding Tax).
• Audit Readiness: Reconcile the revenue reported in the Financial Statements with the Turnover reported in the Income Tax Return (ITR).
• Compliance with Withholding Provisions: Ensure all Withholding Tax (WHT) statements are filed timely, as these are primary triggers for FBR audit selection.

Phase 3: Finalization and Reporting

• Auditor’s Review: Provide the external auditor with full access to ledgers, bank confirmations, stock counts, and minutes of board/shareholder meetings.
• Review of Audit Report: Scrutinize the Auditor’s Report for any "Qualified" opinions or "Emphasis of Matter" paragraphs, and ensure management responds to any identified control weaknesses.
• AGM Approval: Present the audited financial statements to the shareholders in the AGM for final approval.
• Filing with SECP: File the audited financial statements (Form A/Form B) with the SECP within 30 days of the AGM.

Pro Tips & Pitfalls

• Pro Tip (The Reconciliation Strategy): Always perform a monthly reconciliation between your accounting software (e.g., SAP, QuickBooks) and your bank statements. Discrepancies here are the first things auditors flag.
• Pro Tip (Digital Archiving): Maintain a cloud-based digital repository of all tax-deduction certificates (PSID receipts). This significantly reduces the stress of a sudden FBR audit notice.
• Pitfall (Non-Filing of AGM): Many companies focus on filing tax returns but forget to hold the AGM and file the statutory Form A. This is a common trigger for SECP non-compliance notices.
• Pitfall (Inadequate Documentation): Large cash transactions without proper supporting documentation (invoices, delivery notes) are highly susceptible to disallowance by tax authorities, leading to unexpected tax demands.

Template Document: Audit Requirements for Private Companies in Pakistan: SECP SOP

This document serves as a standardized procedure for private companies in Pakistan to ensure full compliance with SECP and FBR audit requirements. It is intended for use by finance departments, company secretaries, and external auditors to manage the annual audit lifecycle.

• Document owner: [Department Name]
• Effective date: [Date]
• Version: [Version Number]
• Applies to: [Company Name]

Roles and responsibilities

Steps

1. Compile the trial balance and supporting schedules for the financial year ending [Date].
2. Reconcile all bank accounts and verify balances against [Bank Name] statements.
3. Ensure all statutory registers, including the register of members and directors, are updated as of [Date].
4. Appoint an external auditor through a board resolution before the [Number] day period prior to the annual general meeting.
5. Provide the external auditor with access to all accounting records, vouchers, and [Document Type] for the audit period.
6. Review the draft audit report provided by the auditor and address any [Type of Audit Query] raised during the field work.
7. Prepare the tax computation in accordance with FBR guidelines and ensure the [Tax Amount] is paid by the due date.
8. Present the audited financial statements to the board for approval at the [Meeting Location] board meeting.
9. File the audited financial statements and the auditor report with the SECP via the e-service portal within [Number] days of the annual general meeting.
10. Submit the annual income tax return to the FBR, including the audited accounts and [Attachment Name], before the statutory deadline.
11. Archive a copy of the final signed audit report and all related compliance documents in the [Storage Location] for a minimum of [Number] years.

Record of completion

• Prepared by: [Full name]
• Reviewed by: [Full name]
• Date completed: [Date]
• Signature: ______________________
• Date signed: [Date]

Frequently Asked Questions (FAQ)

1. Are all private companies in Pakistan required to have an audit? Generally, yes. However, small-sized private companies as per the Companies Act, 2017 may be exempt from statutory audit requirements, provided they meet the specific turnover and capitalization thresholds defined by the SECP.

2. What is the consequence of not holding an AGM or failing to file audited accounts? The company and its directors may face prosecution under the Companies Act, 2017. This includes recurring daily fines and, in severe cases, the company’s name may be struck off from the Register of Companies by the SECP.

3. How does the FBR select a company for audit? The FBR typically uses a "Risk-Based Selection" method, looking for inconsistencies between reported income and bank deposits, high-value expenses without supporting tax withholdings, or companies that fail to file periodic Sales Tax/Income Tax returns.