The Constitutional and Statutory Basis
NFRA was constituted on 1 October 2018 under Section 132(1) of the Companies Act, 2013. Its functions under Section 132(2) include recommending accounting and auditing standards, monitoring and enforcing compliance with those standards, and overseeing the quality of service of the professions associated with compliance. The authority is not an advisory body; it has investigation and disciplinary powers under Section 132(4).
The Jurisdictional Classes Under Rule 3
NFRA’s jurisdiction extends to: companies whose securities are listed in India or outside India; unlisted public companies with paid-up capital of ₹500 crore or more, turnover of ₹1,000 crore or more, or aggregate outstanding loans, debentures, and deposits of ₹500 crore or more; insurance companies, banking companies, and companies engaged in the generation or supply of electricity; companies governed by special Acts; and any body corporate referred by the Central Government in public interest. A foreign subsidiary or associate of a covered Indian company is also within jurisdiction if its income or net worth exceeds twenty per cent of the consolidated income or net worth.
What NFRA Does in Practice
NFRA’s enforcement trajectory has moved from standard-setting recommendations to disciplinary orders against audit firms and individual partners. The 2026 amendments expanded its enforcement powers under Section 132(4)(c), and appeals now turn on substantive grounds rather than jurisdictional objections. For covered entities, the practical consequence is that the auditor’s working papers, independence documentation, and RPT testing are subject to a regulator with a lower tolerance for documentation gaps than a peer review.
The ICAI Boundary
The ICAI’s regulatory role continues for private limited companies and unlisted public companies below the NFRA threshold, and the Quality Review Board continues to conduct quality reviews for those entities. The boundary is entity-based, not firm-based: a firm that audits both covered and non-covered entities may face NFRA for the covered engagements and ICAI for the others. Advisors should map the firm’s client portfolio against Rule 3 before assuming which regulator governs a particular engagement.
Documentation That Withstands NFRA Scrutiny
NFRA orders have focused on: failure to exercise professional scepticism; inadequate audit evidence for related-party transactions; acceptance of management representations without corroboration; and deficiencies in group audit oversight. The defence file should contain the risk assessment, the audit plan, the evidence obtained for significant RPTs, the independence confirmations, and the documentation of challenging inquiries. A file that contains only the final signed statements without the evidence trail is exposed.
Call to Action: For NFRA jurisdiction mapping, audit file readiness review, or disciplinary response strategy, contact office@anujdesaiassociates.com or 9619456656. Website: https://anujdesaiassociates.com. LinkedIn: linkedin.com/in/ca-anuj-desai-122547230.