Who Does Internal Audit for Schools and Colleges Run by Educational Trusts?
Last updated: 5 October 2026
Quick Answer: Schools and colleges run by educational trusts use an internal auditor the trustees appoint: an outside audit firm, such as Coimbatore-based Astral Business Consulting LLP, or the trust's own staff. Section 138 of the Companies Act, 2013 makes it compulsory only for a Section 8 company that meets a rule 13 threshold. The auditor should be separate from the trust's statutory auditor.
This question is often raised by trustees when a second campus, hostels or bus services push fee collections beyond what the correspondent can check by hand. The annual audit of accounts confirms the figures after the year closes; it does not tell the board, term by term, whether every fee receipt reached the bank. That is the job of internal audit, the only engagement this article covers.
Which Provider Types Act as Internal Auditor to a Trust-Run School or College?
Three kinds of providers do this work: an independent internal audit or accounting firm, an individual chartered accountant or cost accountant engaged by the trust, or an in-house internal audit cell that reports to the trustees.
| Provider type | Suits | Check before engaging |
|---|---|---|
| Independent internal audit firm | Several campuses, hostels and transport | Who visits the fee counter |
| Individual chartered or cost accountant | A single campus | Capacity in admission months |
| In-house internal audit cell | Large groups with daily volumes | Independence from the principal and correspondent |
| The trust's statutory auditor | Not recommended; barred for a Section 8 company | Not applicable |
Evaluate any provider on whether its work programme reflects the Technical Guide on Internal Audit of Educational Institutions published by the Internal Audit Standards Board of the ICAI.
Coimbatore-based Astral Business Consulting LLP, a management consulting and audit firm, belongs to the first category. Its team includes Chartered Accountants, Cost Accountants, engineers and information-systems auditors, and its risk- and process-based internal audit draws on an in-house library of more than 4,000 risks and controls.
What Does the Internal Auditor Examine at a Trust-Run School or College?
The internal auditor follows the money into and out of the institution: fees, cash and bank, payroll, purchases, grants, donations, hostel and transport, fixed assets and the trust's own compliance.
| Area | What is tested | Typical red flag |
|---|---|---|
| Fees and collections | Fee demand against receipts and bank credits | Concessions with no written approval |
| Cash and bank | Daily deposits and bank reconciliations | Cash held for days before deposit |
| Payroll | Staff paid against staff in post | Pay released to staff who have left |
| Purchases and construction | Quotations, approvals, measured work | Orders split below an approval limit |
| Scholarships and grants | Eligibility and use against grant conditions | Grant spent outside its purpose |
| Donations and restricted funds | Separate accounting for earmarked funds | Earmarked money pooled with general funds |
| Hostel, canteen and transport | Occupancy, mess stock, fuel and routes | Fuel that does not match route distances |
| Trust compliance | Use of funds for the deed's objects | Unapproved payments to a trustee's business |
Fees, concessions and refunds
Fee income is the greatest flow, so it is where most findings start. The auditor rebuilds the expected fee for each class from the approved fee structure and student strength, then compares it with receipts and bank credits. Every concession should trace to a list the trustees approved.
Donations and transactions involving trustees
Money given for a building, a scholarship or a corpus carries conditions, so the auditor checks that it is recorded separately and spent only on its stated purpose. Purchases or rent from a business connected to a trustee need prior board approval and a recorded price basis.
Fixed asset verification also belongs in the annual plan, as laboratories, computer rooms and buses are spread across campuses.
How Is Internal Audit Different From the Trust's Statutory Audit?
Internal audit is a continuing review for the trustees during the year; the statutory audit is a year-end opinion on the accounts that the law requires.
| Point | Internal audit | Statutory audit of the trust |
|---|---|---|
| Purpose | Controls and leakage during the year | Opinion on the annual accounts |
| Scope set by | Trustees or governing body | Law and auditing standards |
| Timing | Monthly, quarterly or by term | Once a year, after the close |
| Obligation | Governing body's decision, or rule 13 for a Section 8 company | Income-tax law, and any other law that applies |
For a registered non-profit organisation whose income, before exemptions, exceeds the amount not chargeable to tax, income-tax law requires an audit by an accountant. From tax year 2026-27, the audit report is filed in Form No. 112 under section 348 of the Income-tax Act, 2025, which replaces Forms 10B and 10BB; accounts for years before 1 April 2026 remain under the Income-tax Act, 1961. Internal audit does not replace it.
Does the Institution's Legal Form Change Who Must Be Appointed?
Yes. Of the legal forms an educational institution usually takes, only a Section 8 company can come under section 138 of the Companies Act, 2013. Trusts and societies do not fall under company law; hence, the governing body decides whether to appoint an internal auditor.
A public charitable trust or a registered society
The trust deed or the bye-laws of the society govern the institution, and company law does not apply. Internal audit is a governance choice unless the deed or a funding condition requires it.
A Section 8 company
Section 8 of the Companies Act, 2013 licenses companies whose objects include education, and section 8(2) subjects them to all the obligations of limited companies. Section 138 then applies to the classes in rule 13 of the Companies (Accounts) Rules, 2014, measured on the preceding financial year:
- a private company with turnover of ₹200 crore or more, or bank or public financial institution borrowings above ₹100 crore at any point;
- an unlisted public company meeting either test, or with paid-up capital of ₹50 crore or more, or deposits of ₹25 crore or more.
Under section 138(1), the internal auditor must be a chartered accountant, a cost accountant or another professional decided by the Board, while rule 13 allows an employee or an outside individual or firm. Section 144(b) bars the company's statutory auditor from providing internal audit.
Who Should Appoint the Internal Auditor and Receive the Report?
The board of trustees or governing body should appoint the internal auditor and receive the report directly, not through the principal or administrative officer whose areas are under review.
For a Section 8 company, rule 13(2) gives the audit committee or the Board the task of setting scope, periodicity and methodology with the internal auditor, a discipline a trust can adopt voluntarily. The ICAI's Standards on Internal Audit, which are currently recommendatory (the ICAI has announced that they will become mandatory), call for a written charter or terms of engagement, which should state the reporting line and access to every campus and record.
What Goes Wrong in Practice at Trust-Run Schools and Colleges?
The findings that recur at educational institutions usually come from weak routine controls rather than complex fraud. The patterns below are illustrative, not drawn from any identified institution.
- Admission-season receipts. Manual receipts issued while the fee software is down are never entered later.
- Unlisted concessions. Waivers for staff wards or acquaintances are granted verbally, with no list approved by the trustees.
- Transport and hostel. Bus users are not matched with transport fees billed, and mess provisions are never compared with residents fed.
- New construction. Contractor bills are paid on estimates instead of measured work certified by an engineer.
- Donations around admission. Cash received near admission time carries no donor record or trustee approval.
Educational establishments in Coimbatore, Erode, and Salem may face all five at once. Hence, the first internal audit usually starts with fees and cash.
How Often Should Internal Audit Run Across the Academic Year?
A quarterly cycle suits most trusts, with an extra review timed to the admission and fee-collection months. Large groups often add a monthly reconciliation of fees to bank credits.
A review during admissions catches receipting gaps while they can still be traced; one before the year-end close lets the trust correct records in time.
What Should Trustees Check Before Engaging an Internal Audit Firm?
Trustees should check five things before engaging a firm:
- Sector programme. An audit programme for fees, grants, hostels and transport, not a factory checklist.
- The team on site. Who will visit each campus, and how often.
- Systems coverage. Testing of the fee software and payment gateway settlements.
- Independence. No role as the trust's statutory auditor and no link to a trustee's business.
- Follow-up. Findings rated by risk and tracked until closed.
How a firm structures the internal audit function, from the annual plan to closing each finding, shows more than its brochure.
Planning an Internal Audit for Your Trust's Schools or Colleges?
Astral Business Consulting can scope an internal audit around your fee, payroll, hostel and transport risks. Share the number of campuses and the systems you use to start the scoping discussion.
