This article is designed to help you understand the work before you start. It uses the service scope, document checklist and common questions maintained by LEGAL CENTRE; final requirements remain subject to the relevant authority and your facts.
Why this matters to a new or growing CA practice
Information Systems Audit can differentiate a CA who already understands business processes, controls and evidence.
The transition should be staged: systems basics, ITGCs, data, security, then formal ICAI ISA learning/assessment.
What to understand
- Learn ERP/process architecture.
- Master access/change/backup controls.
- Practice system walkthroughs and data extraction.
- Use ICAI ISA standards and course resources.
What to do in practice
- Quarter 1 controls basics.
- Quarter 2 ITGC testing.
- Quarter 3 analytics/security.
- Quarter 4 formal ISA pathway.
Working-paper checklist
- Create a dated working-paper note stating the objective and scope.
- Keep the primary-source document or link used for the conclusion.
- Record client/practice impact, owner and next action.
- Retain reviewer sign-off for material professional judgement.
Common mistakes to avoid
- Focusing only on certification.
- Skipping hands-on system evidence.
- No linkage between IT controls and financial/reporting risks.
Current-source note
ICAI continues its Information Systems Audit standards and post-qualification pathway in 2026.
This article is an educational practice guide. For a live engagement, verify the latest ICAI, regulator, law, rule, notification, circular, portal instruction or standard that applies to the facts and date of the work.
Answers before you start.
Is this article a substitute for the current ICAI or regulator material?+
No. Use it as a practice orientation and working-paper checklist. Verify the current primary source for the engagement date and facts.
What should a newly qualified CA document first?+
Document the objective, scope, primary source, key facts, professional judgement, reviewer conclusion and next action.
How should a small CA firm use this guide?+
Convert the relevant points into a repeatable checklist or standard operating procedure, then adapt it to the client and engagement.
How do I keep this topic current?+
Maintain an official-update log and record the effective date and impact whenever ICAI or the regulator issues a new announcement, circular, standard or portal change.
Rules, forms, portal processes, statutory fees, timelines and eligibility can change. Confirm the current requirement for your specific case before relying on a filing or compliance step. LEGAL CENTRE is a private service-assistance platform and is not a government authority.