Corporate Solutions
Regulatory Risk & Compliance
Assurance and compliance support for banks, NBFCs, funds, listed companies and real estate developers, built around what their regulators expect.
Overview
Regulated businesses answer to more than their shareholders. Banks and NBFCs work within RBI directions, listed companies report on sustainability, companies with CSR obligations must show how funds were spent, and real estate developers must account for every rupee in their project accounts. Requirements change often, and the cost of falling short is high.
Where this helps
Common situations
Banks and co-operative banks
- 01The bank needs concurrent auditors for branches, treasury or specific functions, as RBI guidelines require.
- 02The same audit findings repeat branch after branch, and no one sees the pattern across the network.
- 03Concurrent audit reports arrive late and in different formats, slowing review at head office.
NBFCs, AIFs and SPVs
- 04An NBFC must move to risk-based internal audit and needs a risk assessment and audit plan.
- 05RBI directions change often, and the compliance team cannot say which apply and whether they are met.
- 06A fund or SPV needs process audits across the investment cycle and checks on year-end investor reporting.
KYC and AML
- 07KYC files are incomplete or out of date, and periodic updation is overdue.
- 08KYC exceptions are spread across branches, products and customer types, and no one can tell which matter most.
- 09Foreign and HNI investors must be onboarded with beneficial-owner identification, watchlist screening and FATCA/CRS checks.
- 10A regulatory inspection is due, and KYC and AML records must be ready.
ESG and CSR
- 11The company must file a BRSR, and ESG data is spread across plants, HR and procurement.
- 12BRSR data is collected without controls, so assurance will be difficult.
- 13The company has a CSR obligation but no clear policy, project selection or monitoring.
- 14Implementing NGOs are chosen without checking registrations, track record or use of funds.
Real estate and RERA
- 15Several projects under different SPVs each have their own RERA timelines, and dates are missed.
- 16Withdrawals from the designated project account need CA certification, but project-wise records are not in order.
- 17Completion and handover documents are pulled together at the last moment.
How we help
What we do and how we work
Bank Concurrent & Internal Audit
We carry out concurrent and internal audits for small finance banks, co-operative banks and public sector banks, covering branches, loan processing, treasury and other functions. Reports follow the formats the bank and RBI guidelines require, and findings are analysed across the network so that recurring issues are fixed at the source.
Includes
- branch and functional concurrent audit
- loan and advances review
- treasury and operations audit
- revenue leakage checks
- network-wide findings analysis
- compliance with RBI guidelines
NBFC, AIF & SPV Risk-Based Audit
We assess risks and carry out risk-based internal audits for NBFCs, alternative investment funds and SPVs, including process and control audits across the investment cycle. Compliance audits test adherence to RBI directions and the Companies Act, and results are reported to management committees and boards.
Includes
- risk assessment and audit plan
- risk-based internal audit
- investment-cycle process audits
- RBI and Companies Act compliance audits
- year-end and investor reporting checks
- board and committee reporting
KYC & AML Audit
We audit KYC and AML compliance using data analytics across the full customer base, along three dimensions: by location, by product, and by risk severity. Each exception is scored for criticality, so that no branch, product or customer segment is left unreviewed and the most serious gaps are fixed first.
Includes
- full-population KYC data analysis
- location, product and risk-wise exception reports
- criticality scoring
- periodic KYC updation tracking
- AML monitoring review
- inspection readiness
Investor Onboarding & KYC Operations
We manage end-to-end onboarding of domestic and foreign investors, including individuals, HNIs and corporates. Each investor's KYC is verified, beneficial owners are identified, names are screened against watchlists and FATCA/CRS requirements are checked, with data captured and validated in a structured format.
Includes
- individual, HNI and corporate KYC
- beneficial-owner identification
- AML and watchlist screening
- FATCA/CRS checks
- automated data capture and validation
- onboarding reports
ESG & BRSR Reporting
We help companies prepare the Business Responsibility and Sustainability Report: identifying the data needed, collecting it from plants and functions, and setting up controls so that it can stand up to assurance.
Includes
- BRSR gap assessment
- ESG data collection templates
- KPI calculation
- data controls
- BRSR drafting support
- assurance readiness
- BRSR working files
CSR Advisory & Monitoring
We help companies set CSR objectives and policy, select projects, and evaluate implementing NGOs before funds are released. Fund use is then monitored and reported, so that CSR spending is accounted for and disclosed correctly.
Includes
- CSR policy and objectives
- project selection
- NGO due diligence and registration checks
- fund-utilisation monitoring
- CSR accounting and reporting
- impact assessment support
RERA Compliance & Certification
We track project-level RERA compliance across projects and SPVs, maintain project-wise financial records and monitor the designated project accounts. We issue the CA certificates RERA requires for withdrawals and on the use of project funds, and help prepare documents for completion and handover.
Includes
- project-wise compliance calendar
- RERA filing support
- project-wise accounts
- designated account monitoring
- CA certificates for withdrawal and fund use
- completion and handover documentation
Ways to engage
How we can work with you
Appointment as auditor
Concurrent, internal or special audit appointments from banks, NBFCs and funds
Recurring compliance support
KYC operations, RERA certification, CSR monitoring or BRSR data collection through the year
One-time review
A KYC remediation drive, BRSR gap assessment, CSR policy set-up or pre-inspection review
Who this is for
Small finance banks, co-operative banks and public sector banks; NBFCs, alternative investment funds and their SPVs; listed companies required to file a BRSR; companies with CSR obligations; and real estate developers with RERA-registered projects.
Frequently asked questions
Questions people ask
Can you be our bank's concurrent auditor?
Banks appoint concurrent auditors under their own policy, following RBI guidelines. We take up appointments subject to the bank's eligibility criteria and independence requirements.
Which NBFCs need risk-based internal audit?
RBI requires risk-based internal audit for specified categories of NBFCs based on their type and size. We can check whether it applies to you.
How do you audit KYC across a large branch network?
We analyse the full KYC database by location, product and risk severity, score each exception, and then verify a sample of files in the field.
Is BRSR mandatory for us?
SEBI requires the top 1,000 listed companies by market capitalisation to file a BRSR. Other companies often prepare one voluntarily or because large customers ask for ESG data.
What does the law require for CSR?
Companies above specified net worth, turnover or net profit limits under the Companies Act must spend a set share of their average profits on CSR and report on it. We help set up the policy, monitoring and reporting.
What RERA certificates do you issue?
CA certificates for withdrawals from the designated project account and on the use of project funds, as required under RERA and the applicable state rules.
Services are offered subject to applicable independence requirements.