Auditing a bank or financial institution (BFI) in Nepal is a different discipline from auditing an ordinary trading or manufacturing company. Beyond forming an opinion on the financial statements, the external auditor of a licensed BFI must separately report to Nepal Rastra Bank (NRB) on a specific set of regulatory matters through the Long Form Audit Report (LFAR) — a requirement most general-practice auditors never encounter. This article is for audit professionals working with, or considering, BFI engagements, and covers what makes bank audits structurally different.
Why Bank Audits Differ Fundamentally From Ordinary Company Audits
An ordinary company audit under the Companies Act, 2063 centres on one output: an opinion on whether the financial statements present a true and fair view, addressed to shareholders. A BFI audit carries that same core opinion, but adds a second, parallel reporting obligation directly to the regulator — Nepal Rastra Bank. This dual-reporting structure exists because banks are systemically important and highly leveraged institutions funded largely by public deposits, so NRB needs independent, auditor-verified assurance not just on the numbers but on specific prudential and regulatory compliance matters that go well beyond what a standard financial-statement audit opinion would normally address.
NRB's Unified Directives Governing External Auditors of BFIs
NRB issues and periodically updates a consolidated set of Unified Directives to licensed banks and financial institutions, covering everything from capital adequacy and loan classification to governance, and these directives explicitly shape what the external auditor is expected to test and report on. Audit committees at BFIs are also expected to actively engage with these directives — reviewing the annual audit budget and recommending a shortlist (commonly three names) of external auditors to shareholders for appointment at the AGM, rather than the more informal appointment process seen at ordinary companies. NRB's own supervisory reporting has flagged, in recent Bank Supervision Reports, that some institutions fall short of these audit-committee obligations — for example, recommending only one auditor instead of the required shortlist — underscoring that this is an area NRB actively monitors, not a formality.
The Long Form Audit Report — What Additional Matters It Must Cover
The Bank and Financial Institution Act, 2073 requires the external auditor to submit a Long Form Audit Report to NRB, separate from the standard audit opinion delivered to shareholders. The LFAR is structured around NRB's own numbered directives and requires the auditor to comment specifically on matters such as risk management systems and fraud identification, the bank's overall legal and regulatory compliance, and functioning across a defined checklist of operational and prudential areas — going well beyond a simple statement that the financial statements are fairly presented.
Loan Classification and Provisioning Verification Procedures
Loan classification — categorising each credit exposure as pass, watchlist, substandard, doubtful, or loss based on ageing and repayment performance — sits at the heart of a bank's financial health, since it directly drives how much loan-loss provisioning the bank must hold. The auditor's role includes independently testing a sample of the loan book against NRB's classification criteria, checking that provisioning has been calculated correctly against the classified category, and assessing whether any restructuring, rescheduling, or evergreening practices have been used to artificially avoid a worse classification. This is typically one of the most labour- and judgment-intensive areas of a BFI audit, and misclassification risk is precisely the kind of issue the LFAR is designed to surface to the regulator.
Capital Adequacy and Key Ratio Disclosures Auditors Must Check
Auditors verify the bank's computation of its capital adequacy ratio — confirming that Tier 1 (core) and Tier 2 (supplementary) capital are calculated correctly under NRB's capital adequacy framework, including the specific deductions NRB requires (such as unamortised deferred revenue expenditure, goodwill, and certain equity investments in other regulated financial institutions) before arriving at eligible capital. Beyond capital adequacy itself, auditors typically also review and comment on other key prudential ratios NRB monitors closely — liquidity ratios, the Cash Reserve Ratio, single-obligor/large-exposure limits, and non-performing loan ratios — since these feed directly into NRB's own risk-based supervision of the institution.
Auditor Eligibility and Empanelment Requirements Specific to Bank Audits
Beyond the general Companies Act requirement that only an ICAN-licensed CA can sign a statutory audit, BFI audits carry additional eligibility expectations tied to firm size, experience with financial-institution audits, and — for the larger commercial banks in particular — a track record and staffing capacity NRB and the audit committee will scrutinise before appointment. Audit firms seeking to build a BFI audit practice should expect NRB-linked eligibility criteria to be more demanding than for a general company audit, and should confirm current empanelment or eligibility requirements directly with NRB's Bank Supervision Department and ICAN, since these are periodically tightened as part of NRB's broader push to strengthen audit quality across the sector.
Coordination Between the Statutory Auditor and NRB's Own Supervisory Inspection
NRB conducts its own on-site and off-site supervision of BFIs, entirely independent of the external audit, through its Bank Supervision Department — including risk-based inspection cycles and continuous off-site monitoring of submitted reports and returns. The external auditor's LFAR and the regulator's own supervisory findings are meant to reinforce each other: where NRB's inspection has previously flagged an issue (say, in loan classification or branch authorisation), the external auditor's current-year LFAR is expected to specifically address whether that issue has been remediated. In practice, well-run audit committees actively use both the internal audit function and the external auditor's findings to brief the board, closing the loop between what NRB observes directly and what the annual audit independently verifies.
Frequently Asked Questions
Is there a mandatory auditor rotation requirement specifically for banks?
BFIs are generally subject to auditor tenure and rotation expectations under the Bank and Financial Institution Act and NRB's directives, layered on top of any general Companies Act provisions — the audit committee's practice of recommending a shortlist of auditors to the AGM each year is part of this broader governance structure. Confirm the current maximum consecutive-term limit and any cooling-off period directly with NRB's Unified Directives, since these details are updated periodically.
What is the reporting timeline for submitting the LFAR to NRB?
The LFAR is generally expected to be submitted to NRB within a defined period following the completion of the annual audit, aligned with the bank's broader annual reporting and AGM timeline; banks and their auditors should confirm the specific current-year deadline with NRB's Bank Supervision Department, since exact timelines are set by circular rather than fixed permanently in the Act.
Does every class of BFI (A, B, C, D) require a Long Form Audit Report, or only commercial banks?
NRB's LFAR template is designed to apply across classes of licensed financial institutions, with content tailored to the specific class, though the depth and specific directive references can differ by institution class; confirm the applicable LFAR template and scope for your institution's specific class directly with NRB.
Discussion