IFC/ICFR in India

Internal Financial Controls over Financial Reporting, commonly abbreviated as IFC or ICFR, refers to the policies and procedures a company puts in place to provide reasonable assurance that its financial statements are reliable and prepared in accordance with applicable accounting standards. Under the Companies Act, 2013, the board of directors of an Indian company is required to state in its report that adequate internal financial controls are in place and operating effectively, while statutory auditors of certain companies are required to report separately on the adequacy and operating effectiveness of these controls. This makes IFC a shared responsibility between management and the auditor, and one that requires real documentation and testing rather than a one-line assertion.

Why This Matters

Companies that treat the IFC requirement as a compliance formality, rather than building genuine control documentation and testing evidence, often find themselves scrambling each year to justify the management representation to auditors. This creates friction during the audit, increases the risk of a qualified or adverse auditor opinion on internal controls, and can expose the board to questions about the accuracy of its own certification. A properly implemented IFC framework, by contrast, reduces the risk of financial misstatement and gives management genuine comfort that the numbers being reported are reliable.

How We Help

Control Framework Design

We help management design an IFC framework aligned to a recognised framework such as COSO, covering entity-level controls, IT general controls, and process-level controls across significant financial statement line items and business cycles.

Documentation of Controls

We prepare process narratives, risk and control matrices, and flowcharts that clearly document how each significant risk to financial reporting is mitigated, giving both management and the statutory auditor a common reference point during the audit.

Design and Operating Effectiveness Testing

We test whether documented controls are actually designed appropriately and operating as intended throughout the year, using a sample-based testing approach consistent with the rigour statutory auditors expect when forming their own opinion on ICFR.

Gap Remediation and Management Assertion Support

Where testing reveals control deficiencies, we help management design and implement remediation steps, and support the preparation of the management representation and board assertion on internal financial controls with appropriate supporting evidence.

Who Needs This

• Companies subject to the Companies Act, 2013 board reporting requirement on internal financial controls
• Companies whose statutory auditors are required to report on IFC under the applicable auditing standards
• Organisations preparing for an IPO or planning to raise institutional capital
• Companies that have recently changed ERP systems or undergone significant process changes affecting financial reporting

Our Approach

We work closely with the finance team and statutory auditors from the start of the year rather than treating IFC as a year-end exercise, so that documentation and testing evidence are built progressively and gaps are identified with enough time to remediate before year-end reporting. Our documentation is designed to be practical and audit-ready, not academic paperwork that sits unused for the rest of the year.

Get in Touch

To discuss how we can support you with IFC/ICFR, write to us at info@agarwalurs.com.