Internal Audits Across Locations

Internal audits across locations refer to the systematic examination of an organisation's financial records, operational processes, employee records, statutory compliance, internal controls, and other activities at multiple offices, branches, factories, establishments, warehouses, or regional units.

In employment and corporate law, multi-location internal audits are particularly important for organisations operating across different States or jurisdictions because each location may have different records, employees, contracts, statutory registrations, and compliance obligations.

An internal audit generally aims to determine whether:

• records are accurate and complete;
• company policies are being followed;
• statutory obligations are being complied with;
• employee-related payments are correctly calculated;
• financial transactions are properly authorised;
• assets are properly accounted for;
• fraud or irregularities exist;
• disciplinary or HR procedures have been followed; and
• appropriate internal controls are functioning.

1. Meaning and Purpose of Internal Audit

An internal audit is primarily a management-control mechanism. It is different from an external statutory audit.

An internal audit may examine:

Financial matters

• salary payments;
• reimbursements;
• expenses;
• procurement;
• cash transactions;
• branch expenditure;
• advances;
• asset registers.

Employment matters

• attendance records;
• payroll;
• overtime;
• leave records;
• employee benefits;
• appointment letters;
• disciplinary records;
• termination documentation;
• statutory deductions.

Compliance matters

• labour-law compliance;
• tax compliance;
• social-security contributions;
• workplace policies;
• statutory registers;
• licences and registrations.

Where an organisation operates from several locations, the audit process helps ensure that the same minimum standards of control and compliance are maintained across all units.

2. Internal Audit Across Multiple Locations

A company may have:

• Head Office in Delhi;
• regional offices in Mumbai and Bengaluru;
• factories in Gujarat and Tamil Nadu;
• warehouses in Haryana and Uttar Pradesh.

Each establishment may maintain separate records and follow different local practices.

A central internal audit team may therefore:

1. establish common audit standards;
2. obtain records from each location;
3. conduct physical or remote verification;
4. compare practices between locations;
5. identify irregularities;
6. prepare audit observations;
7. obtain explanations from responsible officers; and
8. recommend corrective action.

The audit should ordinarily be conducted according to pre-defined procedures, rather than selectively targeting particular employees or locations.

3. Legal Importance of Audit Records

Internal audit reports and related documents can become relevant in litigation.

For example, an internal audit may reveal:

• unauthorised payments;
• manipulation of attendance;
• financial irregularities;
• violation of company policies;
• incorrect salary calculations;
• misuse of company property;
• procurement irregularities; or
• failure to follow prescribed procedures.

However, an audit finding is not automatically proof of misconduct.

If an employee is subjected to disciplinary action based on an audit report, the employer may still need to establish the allegations through a legally valid disciplinary process.

This distinction is particularly important in employment disputes.

4. Internal Audit and Principles of Natural Justice

Where an audit identifies alleged employee misconduct and the employer proposes disciplinary action, the employee should ordinarily receive a fair opportunity to respond to the allegations.

Depending upon the applicable service rules, this can involve:

• charge-sheet;
• statement of allegations;
• access to relevant documents;
• opportunity to submit a written defence;
• examination of witnesses;
• cross-examination where applicable;
• consideration of the employee's explanation; and
• a reasoned disciplinary decision.

An internal audit should therefore normally be treated as an investigative or evidentiary source, rather than as an automatic substitute for a disciplinary enquiry.

5. State of Uttaranchal v. Kharak Singh

State of Uttaranchal v. Kharak Singh, (2008) 8 SCC 236

The Supreme Court discussed the requirements of a fair disciplinary process and emphasized the importance of procedural fairness.

The case is relevant to internal audits because an employer cannot simply rely upon an allegation or internal investigation and bypass the procedural safeguards applicable to disciplinary proceedings.

Where an audit report forms the foundation of misconduct allegations, the disciplinary authority must still comply with the applicable rules and principles of natural justice.

Principle

Internal investigation ≠ final proof of misconduct.

The audit may provide the basis for further action, but the employee must receive the procedural protection prescribed by law.

6. State Bank of India v. R. K. Jain

State Bank of India v. R. K. Jain

The Supreme Court has repeatedly recognized the importance of following applicable disciplinary procedures when allegations of misconduct are made against employees.

In cases involving financial irregularities, banking transactions, records, or internal control failures, documentary material generated through internal systems may become important evidence.

However, the disciplinary authority must distinguish between:

• an audit observation;
• an allegation;
• an established fact; and
• a proved charge.

This distinction is particularly important in multi-location audits because an observation at one branch cannot automatically establish misconduct by an individual employee at another branch.

7. Union of India v. H.C. Goel

Union of India v. H.C. Goel, AIR 1964 SC 364

This is a leading authority concerning disciplinary proceedings and the evidentiary basis for findings of misconduct.

The Supreme Court emphasized that a disciplinary finding must have some evidence supporting it.

An audit report may constitute relevant material, but the disciplinary conclusion must be supported by evidence sufficient to establish the charge under the applicable standard.

Application to multi-location audits

Suppose an audit finds that ₹10 lakh is missing from a regional office.

It would not automatically establish that the branch manager committed the misconduct.

The employer may need to establish:

• who had custody of the money;
• what the applicable procedure was;
• who authorised the transaction;
• what records were maintained;
• whether the employee had responsibility;
• whether another employee had access; and
• what evidence connects the employee with the irregularity.

8. Roop Singh Negi v. Punjab National Bank

Roop Singh Negi v. Punjab National Bank, (2009) 2 SCC 570

The Supreme Court emphasized that disciplinary findings must be based upon evidence and that serious allegations cannot simply be assumed to be proved merely because an internal document exists.

The Court observed that documents forming the basis of allegations must be properly considered in accordance with the applicable disciplinary procedure.

Importance for internal audits

An internal audit report should therefore identify:

• the source of information;
• relevant records;
• transactions examined;
• persons responsible;
• applicable policies;
• discrepancies identified; and
• supporting documentary evidence.

A vague statement such as "audit found irregularities" may be insufficient by itself to establish an individual employee's misconduct.

9. M.V. Bijlani v. Union of India

M.V. Bijlani v. Union of India, (2006) 5 SCC 88

The Supreme Court stressed that disciplinary findings must be supported by evidence and that the disciplinary authority cannot base punishment on matters that are not properly established through the prescribed process.

This principle is relevant where an audit covers several locations and identifies numerous irregularities.

An employer should distinguish between:

systemic irregularity and individual misconduct.

For example, an audit may identify that five branches failed to maintain a particular register. That finding does not necessarily establish intentional misconduct by each branch employee.

10. State of Andhra Pradesh v. S. Sree Rama Rao

State of Andhra Pradesh v. S. Sree Rama Rao, AIR 1963 SC 1723

The Supreme Court explained the scope of judicial review over disciplinary proceedings.

The Court recognized that disciplinary authorities have an important role in determining whether misconduct has been established, while judicial review examines whether the disciplinary process suffered from legal or procedural defects and whether the finding was supported by evidence.

Relevance

In an internal audit dispute, a court may examine issues such as:

• whether the disciplinary authority followed the rules;
• whether natural justice was observed;
• whether relevant evidence was considered;
• whether irrelevant material was relied upon; and
• whether the finding had evidentiary support.

11. Managing Director, ECIL v. B. Karunakar

Managing Director, ECIL v. B. Karunakar, (1993) 4 SCC 727

This is a leading Supreme Court decision concerning procedural fairness in disciplinary proceedings.

The Supreme Court recognized the importance of giving the employee an opportunity to respond to the findings of the enquiry officer before final disciplinary action, subject to the applicable legal framework.

Internal-audit application

If an internal audit leads to a disciplinary enquiry, the employee should not ordinarily be deprived of access to material that the applicable rules require to be disclosed.

For example, where the audit findings are relied upon against an employee, relevant portions of the audit material may become important to the employee's defence, subject to applicable rules concerning confidentiality and privileged information.

12. Multi-Location Audit and Employee Transfer

An internal audit may identify irregularities at one location after an employee has been transferred to another location.

This creates an important evidentiary issue.

The employer should establish:

1. the employee's period of posting;
2. the employee's responsibilities;
3. the transactions occurring during that period;
4. who had access to the relevant records;
5. whether responsibility continued after transfer; and
6. whether the employee had any opportunity or authority to commit the alleged irregularity.

An employee should not ordinarily be held responsible merely because the employee's name appears in records relating to a location.

13. Audit Trail and Documentation

A strong multi-location internal audit should maintain an identifiable audit trail.

The audit file may contain:

• audit plan;
• location-wise checklist;
• records examined;
• transaction samples;
• employee interviews;
• photographs where appropriate;
• system logs;
• approvals;
• reconciliations;
• discrepancies;
• management responses;
• corrective-action reports; and
• final audit observations.

This documentation becomes particularly important if the audit findings later form the basis of litigation or disciplinary proceedings.

14. Confidentiality of Internal Audit Information

Internal audit records may contain sensitive information relating to:

• employees;
• customers;
• vendors;
• salaries;
• financial transactions;
• internal controls;
• business strategies.

Therefore, access should generally be restricted to authorised personnel.

At the same time, confidentiality should not automatically be used to defeat an employee's legitimate procedural rights in a disciplinary proceeding. The extent of disclosure depends on the applicable law, service rules, confidentiality obligations, and the circumstances of the case.

15. Consistency Across Locations

One of the major purposes of conducting internal audits across locations is to identify inconsistent practices.

For example:

Such differences may indicate:

• inadequate central control;
• inconsistent implementation of policies;
• local management practices;
• different regulatory requirements; or
• training deficiencies.

The audit should identify the reason for the difference before treating it as misconduct.

16. Internal Audit and Fraud Detection

Internal audits can help identify potential fraud through:

• duplicate payments;
• fictitious vendors;
• unusual transactions;
• manipulation of attendance;
• unauthorised reimbursements;
• unexplained cash shortages;
• altered records;
• conflicts of interest; and
• unusual access to computer systems.

However, an audit red flag is not equivalent to a finding of fraud.

Fraud allegations require appropriate investigation and evidence.

If disciplinary action follows, the employer should clearly specify the alleged conduct and provide the employee an opportunity to defend himself or herself.

17. Internal Audit and Natural Justice: Practical Rule

The following distinction is useful:

Audit → identifies irregularity

Investigation → determines what happened

Disciplinary enquiry → determines whether employee misconduct is established under applicable rules

Disciplinary authority → decides appropriate action

This separation helps prevent an audit report from being treated as an automatic finding of guilt.

18. Six Important Case Laws at a Glance

Conclusion

Internal audits across locations are an important mechanism for maintaining uniform financial, operational, HR and statutory controls in organisations having multiple establishments. An audit can identify discrepancies and provide important documentary material for subsequent investigation.

However, an internal audit finding should not automatically be treated as proof of individual employee misconduct. Where disciplinary action is contemplated, the employer should establish the employee's specific responsibility and comply with applicable disciplinary rules and principles of natural justice.

The principles emerging from H.C. Goel, Sree Rama Rao, Kharak Singh, M.V. Bijlani, Roop Singh Negi, and ECIL v. B. Karunakar demonstrate the importance of evidence, fair procedure, proper documentation, and an opportunity to defend when audit findings are used in employment or service disputes.