Common Challenges in Statutory Audits in 2026

Statutory audits in India have always been compliance-intensive, but 2026 has introduced a new layer of complexity that businesses and auditors are actively navigating. From mandatory digital audit trails to the legislative transition under the Income Tax Act, 2025, the audit landscape has shifted significantly from even two years ago.

For companies registered under the Companies Act, 2013, understanding what auditors are now required to examine and where documentation gaps create compliance failures is foundational to audit readiness.

Below are the seven most significant challenges in statutory audits in 2026, what drives each one, and what businesses need to have in place.

Key Challenges in Statutory Audits in 2026

1. Mandatory Digital Audit Trails

One of the most significant operational changes under the Companies (Accounts) Amendment Rules is the mandatory requirement for software-based audit trails. Every transaction change must be logged with a timestamp, and the trail itself cannot be disabled at any point during the financial year.

• All accounting software must log transaction changes with date and time stamps.
• Audit trails cannot be disabled — any disabling is itself a reportable event.
• Auditors are required to verify the integrity of these trails as part of the statutory audit.
• Gaps or manipulation in audit trails must be reported in the audit report.

Businesses that rely on legacy accounting software or systems where audit trail functionality can be toggled off face direct reportability risk.

2. Expanded Internal Financial Controls (IFC)

Under CARO 2020, auditors are required to test and report on a company’s internal financial controls with greater depth than was previously expected. The burden falls on both the business to maintain continuous evidence and the auditor to evaluate system-driven controls rather than just procedural ones.

• Auditors must evaluate system-driven internal controls under CARO 2020.
• Weak documentation or poor segregation of duties directly increases audit risk.
• Businesses must maintain ongoing evidence of control effectiveness throughout the year, not only at year-end.

The most common failure point is the absence of contemporaneous evidence. Controls that operated during the year but were not documented as they occurred are difficult to verify retrospectively.

3. Technology Reliance and Cybersecurity

As businesses have increased their reliance on ERP systems, AI-driven analytics, and digital compliance platforms, auditors face the challenge of evaluating technology-driven processes alongside financial records.

• Auditors must now assess IT general controls (ITGCs) as a component of the statutory audit.
• Cybersecurity risks and data integrity vulnerabilities can complicate financial record verification.
• Discrepancies between ERP outputs and underlying transaction data can create unexplained variances in financial statements.

For businesses that have recently migrated systems or implemented new platforms, ensuring data migration accuracy and system access controls are audit-ready is essential before the audit commences.

4. Audit Workload Limits

ICAI regulations cap each Chartered Accountant partner at 60 tax audit assignments per year. The practical impact of this limit on scheduling and resource allocation continues to affect audit timelines, particularly around the March financial year-end.

• CA firms must redistribute audit assignments across partners to remain compliant with the cap.
• This redistribution creates scheduling delays, especially for companies with March year-ends.
• Smaller CA firms with fewer partners face the most acute resource pressure.

Businesses should account for potential delays in audit sign-off when planning board meetings, AGMs, and regulatory filings dependent on audited financials.

5. Income Tax Act 2025 Transition

Following the enactment of the Income Tax Act, 2025 which replaced the Income Tax Act, 1961 all section references have been renumbered. This has a direct and practical impact on statutory audit documentation and compliance filings.

• Form 3CD references have been updated to align with the revised section numbering under the 2025 Act.
• Auditors must update all templates, checklists, and working papers to reflect the new numbering.
• Errors in section referencing in audit reports and tax filings can result in compliance failures or filing rejections.

Businesses should confirm with their auditors that updated Form 3CD templates compliant with the Income Tax Act, 2025, are in use before the audit begins.

6. CSR and Legal Amendments

Recent legislative developments have altered the applicability of CSR obligations and statutory audit requirements for a wider set of companies.

• The proposed Corporate Laws (Amendment) Bill, 2026, seeks to raise the CSR net profit threshold from ₹5 crore to ₹10 crore, which would affect CSR applicability for a number of mid-sized companies.
• Auditors must verify CSR compliance based on the applicable threshold at the time of the audit.
• The proposed expanded definition of small companies under the bill also affects which companies qualify for exemptions from certain audit requirements.

Companies operating near the revised threshold should seek advisory confirmation of their CSR obligations and audit applicability before the audit cycle begins.

7. Audit Preparation Burden

Across all the changes above, businesses, particularly mid-sized and smaller entities, are facing materially greater preparation demands than in previous audit cycles. The combination of digital trail verification, expanded IFC documentation, legislative transitions, and regulatory updates adds significant time and resource cost to audit readiness.

• Digital audit trail verification requires coordination between finance teams, software vendors, and IT.
• Expanded IFC documentation demands evidence compiled throughout the year, not retrospectively.
• Changes to wage definitions under the Code on Wages affect PF and gratuity provisions, which must be accurately reflected in financial statements.
• Smaller firms without dedicated compliance resources face the greatest exposure to last-minute audit gaps.

Early engagement with auditors, ideally three to four months before the financial year-end, substantially reduces last-minute documentation gaps and filing delays.

Statutory Audit Challenges: Pre-2026 vs 2026

How MBG Can Help

Statutory audits in 2026 demand more than a year-end review. They require structured preparation, updated documentation, and alignment with a regulatory framework that has shifted significantly in a short period.

MBG’s Audit and Assurance practice supports businesses through every stage of the audit cycle, from pre-audit readiness assessments and IFC documentation support to full statutory audit execution across India. Our team works with current CARO 2020 requirements, the Income Tax Act 2025 transition, and the latest ICAI guidelines.

Contact MBG to schedule an audit readiness review ahead of your financial year-end.