Malaysian companies enter India through several structures: an Indian subsidiary, a branch office, a liaison office, a project office, or an LLP. Each carries different reporting obligations, and mixing them up is one of the most common (and costly) mistakes foreign parents make.
This article covers statutory audit triggers, auditor eligibility, applicable standards, appointment and filing requirements, cross-border reporting issues, and practical preparation steps. Rules and forms change, so always verify current requirements against official MCA, ICAI, and RBI guidance before acting.
Key Takeaways
- Malaysian ownership does not remove an Indian entity from Indian audit obligations.
- Start your analysis with the Indian legal structure, not the Malaysian one.
- Statutory audit, tax audit, internal audit, and Malaysian group consolidation are separate tracks that can still overlap.
- Lock auditor appointment, financials, MCA/ROC filings, and cross-border docs well before deadlines.
Indian Statutory Audit Framework in India
Indian Statutory Audit Framework
What a Statutory Audit Means
An Indian statutory audit is an independent examination of a company's financial statements under the Companies Act, 2013 and applicable auditing standards. The auditor's report gives an opinion on whether those statements present a true and fair view, prepared in accordance with the relevant framework.
A statutory audit differs from:
- Tax audit — a separate Income Tax Act requirement
- Internal audit — focused on internal controls and processes, not statutory reporting
- Management accounts — unaudited internal reporting
- Group audit instructions — issued by a Malaysian parent for consolidation purposes
The Indian Legal and Regulatory Foundation
The Companies Act, 2013 sets out the core obligations:
- Section 139 governs auditor appointment, generally at the first Annual General Meeting (AGM), running until the conclusion of the sixth AGM
- Section 143 covers the auditor's duties, access to books, fraud reporting, and compliance with accounting and auditing standards
- Section 144 restricts non-audit services an auditor can provide
- Section 137 requires filing of financial statements with the Registrar of Companies (ROC) within 30 days of the AGM
Multiple bodies oversee different parts of this process:
- Ministry of Corporate Affairs (MCA) administers the Companies Act and prescribes forms
- ROC receives company, LLP, and foreign-company filings
- ICAI (Institute of Chartered Accountants of India) recommends accounting and auditing standards
- NFRA (National Financial Reporting Authority) monitors audit quality for specified entities
- RBI (Reserve Bank of India) regulates FEMA-related reporting for branch, liaison, and project offices
Always confirm the current section numbers against the official Companies Act text on India Code before relying on any specific provision.
Financial Reporting and Auditing Standards
Whether an Indian entity applies Ind AS or the older Accounting Standards (AS) depends on factors like net worth, listing status, and sector — not on the nationality of its owners. Foreign ownership alone doesn't trigger Ind AS.
Auditing standards are a separate layer entirely. The applicable Standards on Auditing (SAs), such as SA 700 on the auditor's report, apply regardless of which accounting framework the entity follows. Confirm the latest requirements directly with ICAI or NFRA, since roadmap thresholds and standards get updated periodically.
Auditor Eligibility and Independence
Only a practising Chartered Accountant or an eligible CA firm/LLP can be appointed as a statutory auditor under Section 141. Disqualifications include:
- Being an officer or employee of the company
- Holding a prohibited financial interest or indebtedness
- Auditing more than 20 companies simultaneously
- Prior fraud conviction within the last ten years
A Malaysian-approved auditor cannot automatically sign an Indian statutory audit report. Eligibility must be established under Indian law, full stop. This trips up more Malaysian parents than any other compliance point.
Which Malaysian Business Structures Require an Audit in India?
Indian Subsidiary or Incorporated Company
An Indian private or public company owned by a Malaysian parent is a separate Indian legal entity. It's subject to the full Companies Act statutory audit framework, regardless of the parent's Malaysian compliance status.
Being privately held, newly incorporated, small, or not yet profitable doesn't remove the audit obligation. There are narrow statutory exceptions in some cases, but these need to be verified against current law rather than assumed.
Branch, Liaison, and Project Offices
These structures follow a different rulebook than an Indian subsidiary:
| Structure | Key Requirement |
|---|---|
| Branch Office | Section 143(8) allows audit by the company auditor or another qualified Indian professional |
| Liaison Office | Annual Activity Certificate (AAC) submitted to the AD bank and DGIT (International Taxation) |
| Project Office | AAC submitted to the AD Category-I bank |
Registered foreign companies also face separate obligations under the Companies (Registration of Foreign Companies) Rules, 2014:
- Audit of Indian operations by a practising CA in India (Rule 5)
- Financial statements filed via Form FC-3 within six months of the foreign parent's financial year-end
- Form FC-4 filed within 60 days of the financial year-end
RBI permissions matter too. Typical eligibility thresholds, per the RBI Master Direction on branch/liaison/project offices, include:
- Branch office: five-year profit track record and USD 100,000 net worth
- Liaison office: three-year track record and USD 50,000 net worth
LLPs and Other Non-Company Structures
An Indian LLP follows the LLP Act, not company law. Audit becomes mandatory when:
- Annual turnover exceeds ₹40 lakh, or
- Partner contribution exceeds ₹25 lakh
Below both thresholds, audit is voluntary. Don't borrow company-law audit triggers here — the LLP framework is different, and thresholds should always be checked against the current Act.
Public, Listed, Regulated, or Sector-Specific Entities
Stricter rules apply where the entity is:
- Listed: SEBI's LODR Regulation 33(3)(d) requires audited results within 60 days of financial year-end
- An NBFC: subject to RBI's specific statutory audit directions
- An insurer: additional IRDAI reporting layers apply
If your Malaysian business operates in a regulated sector in India, identify the sector regulator early. It often adds requirements on top of the standard Companies Act audit.
Exemptions, Parent Obligations, and Edge Cases
Any Indian exemption or simplified route must match the entity's exact classification under current law. Malaysian audit-exemption thresholds have no bearing on Indian requirements — don't assume a small-company exemption applies just because it would in Malaysia.
Even if the Indian entity qualifies for a lighter filing route, the Malaysian parent's own group-audit, consolidation, lender, or investor reporting obligations don't disappear. These run on separate tracks.
Audit Process, Documents, and Compliance Calendar
Auditor Appointment and Engagement Planning
The first auditor is typically appointed by the board within 30 days of incorporation; subsequent auditors are appointed at the AGM. Steps include:
- Confirm auditor eligibility and obtain written consent
- Secure board or shareholder approval as required
- File the appointment notice with the ROC within 15 days
- Record the appointment in statutory registers
Overseas parents should coordinate powers of attorney and communication protocols with the Indian board or authorised representatives well in advance. Delays here cascade into every later deadline.
Audit Readiness and Fieldwork
A typical document request covers:
- General ledger and trial balance
- Bank reconciliations and invoices
- Contracts and fixed-asset registers
- Payroll and tax records
- Inventory evidence and intercompany balances
- Related-party registers and prior-year working papers
Auditors test revenue, expenses, assets, liabilities, internal controls, related-party transactions, and foreign-currency balances. The exact procedures depend on risk and materiality; no two audits look identical, even within the same industry.
Financial Statement Approval, Filing, and Consequences
The typical sequence:
- Finalise financial statements
- Board approval
- Auditor's report issued
- Shareholder approval at AGM
- Filing with ROC/MCA
Key forms are AOC-4 (financial statements) and MGT-7 (annual return). For a standard 31 March year-end, plan around this compliance calendar:
- AGM: Hold within six months of FY end (by 30 September)
- AOC-4: File within 30 days of the AGM
- MGT-7: File within 60 days of the AGM
Late filing, incomplete records, or audit qualifications carry real consequences. The MCA has penalised directors for non-signing of financial statements in recent enforcement actions. Confirm current penalty amounts before communicating figures to your Malaysian board.
Cross-Border Reporting and Malaysian Parent Considerations
Indian Accounts Versus Malaysian Group Reporting
Indian statutory financial statements are prepared under the Companies Act, 2013 and applicable Ind AS or AS. Your Malaysian parent's consolidation team will usually need adjustments or reconciliation schedules to bridge those numbers to MFRS or the group's IFRS policy pack.
Get ahead of this early. Exchange group-audit instructions, materiality thresholds, and consolidation deadlines between the Indian auditor and the Malaysian parent's auditor before year-end, not after.
Intercompany Transactions and Regulatory Overlays
Cross-border transactions between India and Malaysia trigger several parallel requirements:
- Related-party disclosures in the Indian financial statements
- Transfer pricing documentation and Form 3CEB where international transactions exist
- Withholding tax on royalties, management fees, and service charges
- Foreign-exchange translation for cross-border balances
FEMA, income tax, GST, and customs requirements run alongside the statutory audit, not through it. Review tax/TP, FEMA, and GST with the relevant specialist—not as a single audit deliverable.
Data, Confidentiality, and Coordination
Moving accounting records and audit evidence between India and Malaysia needs proper controls:
- Defined access controls and confidentiality agreements
- Clear ownership of documents and working papers
- A single point of contact on each side
Consistent account mapping and reconciled intercompany ledgers cut duplicated effort between the Indian audit and Malaysian parent reporting. That discipline alone can save weeks in the year-end crunch.
Practical Checklist and Next Steps
Before Appointing or Beginning the Audit
Build an entity profile recording:
- Indian registration type and ownership structure
- Business activities and financial year-end
- Licences and RBI/FEMA status
- Prior auditor and applicable accounting framework
- All known filing obligations
Then create a three-part compliance tracker covering auditor appointment, audit fieldwork, and post-audit filings, with every deadline confirmed against current official sources.
Selecting Suitable Indian Audit and Compliance Support
When evaluating an Indian auditor or advisory firm, check:
- Statutory audit capability with foreign-owned businesses
- Sector knowledge relevant to your operations
- Independence and cross-border communication processes
- Data-security controls
- Ability to coordinate tax and accounting work without compromising audit independence
Confirm engagement scope, deliverables, fee basis, and escalation process before signing anything.
How VJM Global Can Assist Malaysian Businesses
VJM Global supports Malaysian businesses operating in India with accounting, audit coordination, tax compliance, entity setup, and back-office support. We help the parent company organise records and manage communication with Indian professionals.
Our team has worked with foreign-owned entities across subsidiary, branch, liaison office, and LLP structures, with strict protocols for handling sensitive financial data.
Not sure whether your Indian operation is a subsidiary, branch office, liaison office, project office, or LLP? Get in touch with our team for an entity-specific review of your audit and filing obligations.
Frequently Asked Questions
What are the statutory audit requirements in India for Malaysian companies?
Requirements depend on the Indian legal form and applicable Indian legislation, not Malaysian ownership. An Indian subsidiary follows Companies Act rules, while a registered foreign office follows separate MCA foreign-company requirements. Confirm both against current MCA guidance.
Who is eligible to be appointed as a statutory auditor in India?
Only a practising Chartered Accountant or an eligible CA firm/LLP can be appointed, subject to independence rules and disqualification criteria under Section 141. Rotation requirements may apply to listed and certain prescribed companies.
What are the new statutory audit rules in India?
Rules evolve through MCA amendments, ICAI standards updates, and NFRA/RBI circulars. Always distinguish enacted changes from proposals and verify against the latest official notifications before relying on them.
What are the audit standards in India?
Indian statutory audits follow ICAI's Standards on Auditing (SAs), which apply regardless of whether the entity uses Ind AS or the older Accounting Standards framework. Check ICAI and NFRA for the latest issued standards.
Does an Indian subsidiary of a Malaysian company need a separate statutory audit?
Yes. An Indian subsidiary is a separate legal entity with its own financial statements and audit obligations, even when the Malaysian parent conducts its own group audit.
Is a statutory audit in India the same as a tax audit?
No. A statutory audit is a Companies Act requirement examining financial statements broadly, while a tax audit is an Income Tax Act requirement with a narrower scope. One doesn't automatically satisfy the other. Check applicability separately.
