ICAI Peer Review Phase IV extends the mandatory peer review requirement to all firms that sign audit reports for public interest entities, certain listed entities, and firms above a specified threshold. This guide explains the Phase IV requirements, what a peer review examines, how to prepare, and what firms must have in place before the reviewer arrives.
ICAI Peer Review: Phase Structure Overview
| Phase | Category of Firms | Mandatory Since |
|---|---|---|
| Phase I | Firms signing statutory audits of public interest entities (listed cos, banks, insurance) | 2009 |
| Phase II | Firms with 3+ full-time partners; signing audits of entities with turnover > ₹50 crore | 2012 |
| Phase III | Firms with 1–2 full-time partners; signing audits of entities with turnover > ₹10 crore | 2019 |
| Phase IV | All firms conducting statutory audit of entities with paid-up share capital > ₹10 crore OR signing specified other audit engagements | Check ICAI website for latest cutoff; notification-driven |
Phase IV scope and timelines are periodically updated by ICAI. Always verify the latest notification at icai.org before planning your compliance.
What a Peer Review Examines
A peer review assesses whether your firm's quality control system and audit practices comply with ICAI's Standards. The reviewer will examine:
1. System of Quality Control (SQC-1 / SSQM-1)
- Firm's quality control manual (does one exist? Is it relevant and firm-specific?)
- Independence policies and confirmation process
- Staff training and CPE compliance records
- Engagement acceptance and continuance policies
- Engagement performance (supervision and review procedures)
- Monitoring of quality control system
2. Engagement File Review (2–3 sample audit files)
- Planning documentation (risk assessment, materiality determination)
- Evidence of work performed (working papers, analytical procedures)
- Communication with management and those charged with governance
- Review notes and resolution of issues
- Final file assembly (all documents present, properly referenced)
Documentation Firms Must Have Ready
| Document | Typical Form | Common Gap |
|---|---|---|
| Firm Quality Control Manual | Written policy document, firm-specific | Generic/boilerplate manual not adapted to firm |
| Independence confirmation forms | Signed by every partner and qualified staff annually | Not collected or collected but not filed |
| CPE compliance records | ICAI CPE portal downloads + attendance records | CPE hours below requirement |
| Engagement acceptance checklist | Per engagement, showing independence and competence check | No formal acceptance process documented |
| Engagement letters | Signed by client, renewed annually or on scope change | Old letters not updated; missing signatures |
| Working paper files (for sample audits) | Complete, cross-referenced audit files | Incomplete files; working papers added post-facto |
| Peer review certificate (prior period) | ICAI-issued certificate | Lapsed certificate |
How to Prepare: A 90-Day Pre-Review Checklist
- Day 1–30: Obtain your firm's QC manual (from ICAI's model template if none exists); customise it to your firm's actual practices; get Partner sign-off on the final version
- Day 1–30: Collect signed independence confirmation forms from all partners and qualified staff; update any outstanding CPE records
- Day 30–60: Review 3–5 recent audit files against the SA 230 (audit documentation) standard; identify gaps; retrospectively complete any documentation gaps that are legally supportable
- Day 60–90: Mock peer review: have a senior colleague review one complete audit file using the ICAI's peer reviewer checklist; address all gaps found
- Day 80–90: Confirm the reviewer is registered on the ICAI peer reviewer panel; schedule the review at a time when the engagement partner is available for the full review day
TaxZeo tracks CPE compliance, UDIN generation, and client engagement documentation — giving you the data trail a peer reviewer needs, automatically maintained throughout the year.
Start Free TrialFrequently Asked Questions
What happens if a firm fails its peer review?
A peer reviewer issues a report with one of three conclusions: (1) Good — no significant deficiencies; (2) Acceptable — deficiencies exist but controls are adequate overall; (3) Not acceptable — significant deficiencies that require corrective action. A "not acceptable" result triggers a follow-up review after the firm has implemented corrective measures. ICAI can also notify the NFRA (National Financial Reporting Authority) in cases of significant ongoing quality issues. The practical consequence most firms face is reputational — peer review status is publicly disclosed on the ICAI website and increasingly required by major clients and stock exchanges as a prerequisite for audit empanelment.
Can a sole practitioner avoid peer review obligations?
Phase IV applicability is based on the type of audits conducted, not firm size. A sole practitioner who signs statutory audits of entities falling within the Phase IV threshold (e.g., paid-up capital above ₹10 crore) is subject to peer review regardless of firm size. Sole practitioners who conduct only tax audits, GST audits, and small-company statutory audits (below the threshold) may not be required to undergo peer review — but should verify against the latest ICAI notification as thresholds are periodically lowered.