9.6.8. The National Financial Reporting Authority Rules, 2018
8. Monitoring and enforcing compliance with auditing standards.-
(1) For the purpose of monitoring and enforcing compliance with auditing standards under the Act by a company or a body corporate governed under rule 3, the Authority may: –
(a) review working papers (including audit plan and other audit documents) and communications related to the audit;
(b) evaluate the sufficiency of the quality control system of the auditor and the manner of documentation of the system by the auditor; and
(c) perform such other testing of the audit, supervisory, and quality control procedures of the auditor as may be considered necessary or appropriate.
(2) The Authority may require an auditor to report on its governance practices and internal processes designed to promote audit quality, protect its reputation and reduce risks including risk of failure of the auditor and may take such action on the report as may be necessary.
(3) The Authority may seek additional information or may require the personal presence of the auditor for seeking additional information or explanation in connection with the conduct of an audit.
(4) The Authority shall perform its monitoring and enforcement activities through its officers or experts with sufficient experience in audit of the relevant industry.
(5) The Authority shall publish its findings relating to non-complainces on its website and in such other manner as it considers fit, unless it has reasons not to do so in the public interest and it records the reasons in writing
(6) The Authority shall not publish proprietary or confidential information, unless it has reasons to do so in the public interest and it records the reasons in writing.
(7) The Authority may send a separate report containing proprietary or confidential information to the Central Government for its information
(8) Where the Authority finds or has reason to believe that any law or professional or other standard has or may have been violated by an auditor, it may decide on the further course of investigation or enforcement action through its concerned Division.