Empanelment Criteria for Stock Broker System Auditors — What Qualifies an Auditor
Stock exchanges must empanel system auditors based on specific qualifications, experience, and conflict-of-interest criteria. The eligibility criteria emphasise the experience and qualification of auditors rather than only on the experience of the audit firm. This article explains what qualifies an auditor for empanelment and the norms for de-empanelment.
The Regulatory Basis
The system audit framework prescribed under SEBI Circular CIR/MRD/DMS/34/2013 dated November 6, 2013 includes detailed auditor selection norms. The framework has been further strengthened through SEBI Circular SEBI/HO/MIRSD/TPD/CIR/2025/10 dated January 31, 2025, which introduced technology-based monitoring and enhanced empanelment criteria.
Eligibility Criteria for Empanelment
Experience
- The Auditor shall have minimum three years of experience in IT audit of securities market participants e.g. Stock Exchanges, Clearing Corporation, Depositories, stock brokers, depository participants etc.
- The audit experience should cover all the major areas mentioned under Terms of Reference (ToR) of the system audit specified by SEBI / Stock Exchange.
Qualifications
It is recommended that resources employed shall have relevant industry recognized certifications:
- D.I.S.A. (ICAI) Qualification.
- CISA (Certified Information System Auditor) from ISACA.
- CISM (Certified Information Securities Manager) from ISACA.
- CISSP (Certified Information Systems Security Professional) from International Information Systems Security Certification Consortium (ISC).
Experience of Frameworks
- The Auditor should have experience of IT audit/governance frameworks and processes conforming to industry leading practices like CobiT.
No Conflict of Interest
- The Auditor shall not have any conflict of interest in conducting fair, objective and independent audit of the stock broker.
- The directors / partners of Auditor firm shall not be related to any stock broker including its directors or promoters either directly or indirectly.
No Pending Cases
- The Auditor shall not have any cases pending against its previous audited companies/firms, which fall under SEBI's jurisdiction, which point to its incompetence and/or unsuitability to perform the audit task.
Additional Criteria for QSBs
Exchanges shall prescribe additional criteria for empanelment of system auditor for Qualified Stock Brokers (QSBs). Given the larger size and complexity of QSBs, auditors must have higher qualifications and experience to audit these entities.
Maximum Ceiling on Appointment
To address the conflict of interest and to ensure quality in the audit report, exchanges shall put in place a maximum ceiling on the appointment or reappointment of an auditor. This prevents a single auditor from becoming too dominant in the market.
Cost Rationalisation
Exchanges, in consultation with SEBI, shall issue broad guidelines to ensure rationalization and standardization of the cost of conducting system audit from empaneled system auditor based on certain parameters such as number of clients, turnover, IT infrastructure etc.
Reassessment of Audit
Exchanges shall define the critical audit area and place them in the online web portal. The reassessment shall be carried out by the same system auditor if gaps/deficiencies are found in such critical areas of system audit. Further, such reassessment shall also be carried out by such auditor in case of other stock brokers where he has conducted the audit.
De-empanelment
In case it is observed by stock exchanges that auditor has not done audit prudently or gaps/deficiencies are found in audit report repeatedly, exchanges shall de-empanel such auditor and also refer such matters to the National Financial Reporting Authority (NFRA) / ICAI / ISACA, as applicable for appropriate action against such auditor.
How We Help
At Anuj Desai & Associates, we help system auditors understand the empanelment criteria, prepare for empanelment, and ensure compliance with SEBI's requirements. If you are a system auditor seeking empanelment or a stock broker looking to appoint a qualified auditor, reach out to our regulatory compliance desk.