Management-side controls design and testing for Tamil Nadu companies

Internal Financial Controls Consultants in Coimbatore

Internal financial controls consultants help a company document, test and strengthen the controls behind its accounts before the statutory auditor reports on them. Astral Business Consulting LLP, a Coimbatore-based management consulting and audit firm, does this for manufacturers and private companies across Tamil Nadu: a gap assessment against COSO, a risk and control matrix, testing on ERP data and support while fixes go in. The work starts from an in-house library of more than 4,000 risks and controls.

Discuss Your Controls Scope

Motor assembly line in a Coimbatore factory, where internal financial controls cover production and inventory

Our Internal Financial Controls Services for Manufacturers

Each engagement is scoped to the controls the company itself owns, from the first gap review to retesting after a fix, with the audit opinion left to the statutory auditor.

Gap Assessment Against COSO

Entity-level, financial, IT and operational controls are benchmarked against COSO's 2013 Internal Control Integrated Framework, and every gap is listed with the risk it leaves open and the kind of control that would close it.

Check Whether Reporting Applies

Risk and Control Matrix Preparation

Each material cycle, from purchases and sales to inventory, payroll and the month-end close, is mapped row by row from 1,500+ documented process risks and controls: the risk, the assertion it threatens, the key control, its owner and its frequency.

Read the Matrix Guide

Control Design Before the Statutory Audit

Where a risk has no working control, one is designed inside the ERP or as a documented manual review, then left to operate long enough to be sampled before the auditor reports under section 143(3)(i).

See How Implementation Works

IFC Audit Readiness Review

Key controls are tested on management's behalf for design and operating effectiveness across the year, on samples or full ERP populations, so exceptions surface before the statutory auditor begins its section 143(3)(i) procedures.

See How IT Controls Are Tested

Remediation of Reported Control Weaknesses

Each deficiency in the statutory auditor's section 143(3)(i) report or letter is traced to a root cause and given an owner and a target date, and the repaired control is retested on items dated after the fix.

Read About Remediation

IT General Controls Behind ERP Controls

Automated three-way matching or credit limits hold only if user access, program changes and backups are controlled, so these are tested against 2,500+ information-systems risks and controls held in the same library.

Explore ITGC Audit
Accounts and records room in a Coimbatore manufacturing office with box files and ledgers

Our 5-Step Internal Financial Controls Method

Scope and planning
We agree with management which entities, plants and processes are material to the accounts, which ERP modules feed them, and the period to be covered. For an engineering or textile manufacturer this usually brings purchases, inventory, production costing and sales into scope before smaller cycles.

Risk assessment and walkthroughs
Each material process is walked through with the people who run it, from the indent or sales order to the ledger posting. Financial, operational and compliance risks are recorded, and existing controls are noted exactly as they operate on the floor, not as the manual describes them.

Matrix and control design
Risks, controls and owners go into the risk and control matrix. Where the walkthrough finds no control or a weak one, a fix is proposed in line with COSO and agreed with the owner, whether it is an ERP setting, an approval step or a periodic review.

Design and operating tests
Design is checked first, then operating effectiveness. Transactions are extracted from the ERP for the period and tested on samples or, where the data allows, across the full population, so that rate overrides, missing approvals and duplicate vendor masters show up as exceptions.

Findings, fixes and retests
Findings go to management with a severity, an owner and a date, then to the audit committee or Board. Agreed fixes are supported while they go in and retested on later transactions, so the Board sees which key controls operated and which points remain open.

Who this work suits

Management Testing or the Auditor's Opinion?

This service suits a company that wants its own evidence on controls before the statutory auditor arrives. That includes a private company that is inside section 143(3)(i) or nearing the exemption limits, an unlisted public company, or an Indian unit of a foreign group whose parent asks for COSO-based control testing. It does not replace the statutory auditor's own report under section 143(3)(i), which no outside consultant can give. A company that needs a new ERP built is better served by an implementation partner.

Stores issue counter with a closed register and spare-part bins, where issue controls are tested

Western Tamil Nadu practice

Why Choose Astral Business Consulting for Internal Financial Controls?

Through the computer, not around it

Controls are tested on data pulled from the ERP itself, such as approval logs, master changes and posting dates, rather than on printed vouchers alone.

A documented risk and control library

Testing starts from 1,500+ process risks and controls and 2,500+ information-systems risks and controls, so a matrix for a foundry or a spinning mill begins from documented examples.

Engineers beside the accountants

The team includes Engineers and Cost Accountants as well as Chartered Accountants, which matters where controls sit in yield, scrap, job work and the costing that values inventory.

Based in Western Tamil Nadu

A base in Coimbatore, in the Western Tamil Nadu industrial belt, keeps the team within reach of plants in Tiruppur, Erode and Salem, so walkthroughs and retests happen on the floor where transactions start.

About Astral Business Consulting LLP

A management consulting and audit firm in Western Tamil Nadu

Astral Business Consulting LLP is a management consulting and audit firm whose head office is at Civil Aerodrome Post, Coimbatore. Its Risk Advisory work helps companies build or improve an internal control framework, benchmarked against COSO, and covers entity-level, financial, IT and operational controls. The firm is organised in four divisions, Integrated Audit, Cycle Count, Best Accountant and Consulting, and serves engineering, textile, dairy, automobile and process manufacturing companies among other industries. Its methodology rests on an in-house library of 1,500+ process risks and controls and 2,500+ information-systems risks and controls, and its audits are run through the computer, not around it. Chartered Accountants, Cost Accountants, Engineers, software experts and information systems auditors make up the team. Companies in the Western Tamil Nadu industrial belt, from foundries to spinning mills, can therefore have process, costing and system controls reviewed by one team in one engagement.

  • COSOframework behind the methodology
  • 1,500+process risks and controls documented
  • 2,500+information-systems risks and controls

Questions on Internal Financial Controls Engagements

Who are the internal financial controls consultants in Coimbatore?
Astral Business Consulting LLP, a Coimbatore-based management consulting and audit firm, designs and tests internal financial controls through its Risk Advisory practice. Big Four advisory arms, national mid-size firms and smaller local audit practices are the other options. Compare them on knowledge of your ERP, experience with plants like yours, how much testing runs on system data, and independence from your statutory auditor.

Can internal financial controls be tested in the first year on a new ERP?
Yes, but the year is split. Controls in the old system are tested up to the go-live date, controls in the new ERP from go-live onwards, and the data migration itself is checked for complete and accurate opening balances and masters. Testing the new system once it has run for a few months leaves time to fix gaps before the year-end audit.

Does management testing replace the statutory auditor's opinion on internal financial controls?
No. Management testing, often loosely called an IFC audit, gives the Board its own evidence on whether key controls are designed well and are working. The opinion on internal financial controls with reference to financial statements is still formed by the statutory auditor, which runs its own procedures and decides how far, if at all, it relies on the company's work.

Is internal financial control over financial reporting narrower than the Companies Act definition?
Yes. The Explanation to section 134(5)(e) is broad: the policies and procedures for the orderly and efficient conduct of the business, including adherence to policies, safeguarding of assets, prevention and detection of frauds and errors, accurate and complete accounting records, and timely preparation of reliable financial information. The auditor's report under section 143(3)(i) is confined to controls with reference to financial statements, the part that protects the accounts.

Do internal financial controls cover GST, TDS and payroll entries?
Yes, wherever they post to the accounts. Controls over payroll processing, statutory deductions and the GST and TDS liabilities recorded in the books fall within internal financial controls with reference to financial statements, because errors there misstate expenses and liabilities. Whether returns were filed on time is a compliance question; the controls test asks whether the books record the right amounts.

What decides the scope and cost of an internal financial controls engagement?
Mainly the number of legal entities and plants, which processes are material, the ERP and whether IT general controls are included, and whether the work is design only or design and testing. The period covered, the number of test rounds and the deliverables, such as the matrix, working papers and a remediation tracker, also change the effort.

How are internal financial controls tested in a group with several plants?
Entity-level controls, such as delegation of authority, the month-end close and IT governance, are usually tested once at the head office. Process controls are tested where the transactions happen, so a plant that raises its own purchase orders or dispatches its own goods is sampled separately, with larger samples at plants carrying more value at risk.

What happens to internal financial controls when a plant changes a process or product line?
The affected controls are mapped again. A new process, product line or plant changes who approves what and which ERP entries record it, so the walkthrough is repeated for that cycle, the risk and control matrix is updated, and testing for the changed controls starts from the date of the change rather than the start of the year.

Coimbatore, the Western Belt and Chennai

As internal financial controls consultants in Coimbatore, Astral Business Consulting works from its head office in the city with companies there and across Tiruppur, Erode and Salem, and serves companies in Chennai and Hosur from the same base. Groups with plants in other parts of Tamil Nadu or in other states can discuss how those locations would be covered in the testing plan.

Discuss Your Internal Financial Controls Scope

Leave your name and email and the team will respond as soon as possible. It helps to have ready your latest audited turnover and borrowing figures, the ERP you run, the number of plants, and any control points from the statutory auditor's last report.

contact@astralbusinessconsulting.com

Scope your controls review

Tell us a bit about you and we'll be in touch shortly.

contact@astralbusinessconsulting.comDiscuss Your Controls Scope