This article is designed to help you understand the work before you start. It uses the service scope, document checklist and common questions maintained by LEGAL CENTRE; final requirements remain subject to the relevant authority and your facts.
Why this matters to a new or growing CA practice
ICAI issued a public announcement on unauthorised access to ICAI Digital Platforms in July 2026.
For a CA practice, portal security is professional risk management because credentials can expose member identity, client data, filings and attest functions.
What to understand
- Use unique passwords and MFA where available.
- Do not share member or client credentials in chat groups.
- Keep recovery email/mobile details current.
- Revoke access promptly when staff roles change.
What to do in practice
- Maintain a portal-access register.
- Use a password manager.
- Separate member credentials from staff operational logins.
- Record security incidents and recovery steps.
Working-paper checklist
- Create a dated working-paper note stating the objective and scope.
- Keep the primary-source document or link used for the conclusion.
- Record client/practice impact, owner and next action.
- Retain reviewer sign-off for material professional judgement.
Common mistakes to avoid
- Sharing OTPs/credentials informally.
- Using one password across professional portals.
- Leaving ex-staff access active.
Current-source note
ICAI posted a public announcement on unauthorised access to its digital platforms in July 2026; use current security instructions from the official platform.
This article is an educational practice guide. For a live engagement, verify the latest ICAI, regulator, law, rule, notification, circular, portal instruction or standard that applies to the facts and date of the work.
Answers before you start.
Is this article a substitute for the current ICAI or regulator material?+
No. Use it as a practice orientation and working-paper checklist. Verify the current primary source for the engagement date and facts.
What should a newly qualified CA document first?+
Document the objective, scope, primary source, key facts, professional judgement, reviewer conclusion and next action.
How should a small CA firm use this guide?+
Convert the relevant points into a repeatable checklist or standard operating procedure, then adapt it to the client and engagement.
How do I keep this topic current?+
Maintain an official-update log and record the effective date and impact whenever ICAI or the regulator issues a new announcement, circular, standard or portal change.
Rules, forms, portal processes, statutory fees, timelines and eligibility can change. Confirm the current requirement for your specific case before relying on a filing or compliance step. LEGAL CENTRE is a private service-assistance platform and is not a government authority.