Testing CSR expenditure classification means independently recomputing the mandated CSR obligation — two percent of average net profit for the preceding three financial years, computed under section 198 — then checking every item claimed as CSR spend against the activities actually permitted under Schedule VII and the specific exclusions in the CSR rules, since activities that benefit the company's own employees, that are undertaken in the normal course of business, or that amount to a contribution to a political party, do not qualify however they are labelled internally.
Why the classification test has to look past the label
Expenditure that is really marketing, employee welfare, or ordinary business development dressed up as community outreach is the most common finding in this area. The test is whether the activity, in substance, sits within a Schedule VII head and satisfies the rules' exclusions — not whether the client's CSR committee minuted it as CSR.
The testing sequence
- 01Recompute average net profit for the preceding three years under section 198 independentlyThis is a defined computation with specific add-backs and deductions, not the reported net profit for those years — rebuild it rather than taking the client's figure.
- 02Recompute the two percent mandated obligation for the year and compare to the obligation the client has disclosedA difference here changes every downstream conclusion about whether the company spent enough, so resolve it before testing individual items.
- 03Obtain the full list of CSR projects and expenditure for the year, with supporting documentation for eachProject approval by the CSR committee and the board, the implementing agency or in-house execution, and actual utilisation certificates or expenditure records — not just the summarised ledger entry.
- 04Test each project against the Schedule VII activity heads it is claimed underConfirm the activity genuinely falls within the specific head claimed — eradicating hunger, education, environmental sustainability, and so on — reading the actual project scope, not the project's title.
- 05Test each project against the specific exclusions in the CSR rulesActivities undertaken in the normal course of business, benefiting only the company's own employees and their families, contributions to a political party, and activities outside India except for training of Indian sports personnel, are all excluded regardless of their Schedule VII framing.
- 06Trace administrative overheads to the permitted capCSR administrative overheads are capped as a percentage of total CSR expenditure for the year — recompute this percentage and flag any excess.
- 07Recompute the unspent CSR amount and trace its treatmentUnspent amounts relating to an ongoing project must be transferred to a specified unspent CSR account within the prescribed time and utilised within the following periods; unspent amounts not relating to an ongoing project must be transferred to a specified fund. Trace the actual transfer, the amount, and the timing against the requirement.
| Step | Evidence |
|---|---|
| Mandated obligation | Section 198 average net profit, recomputed for the preceding three years |
| Activity classification | Each project tested against the specific Schedule VII head claimed, read from project scope not title |
| Exclusion testing | Each project tested against the normal-course-of-business and employee-benefit exclusions |
| Administrative overhead cap | Recomputed as a percentage of total CSR spend for the year |
| Unspent amount treatment | Transfer amount and timing traced against the ongoing-project and non-ongoing-project rules |
Regulatory requirement
Section 135 of the Companies Act and the Companies (Corporate Social Responsibility Policy) Rules set the obligation computation, the permitted Schedule VII activities, the specific exclusions, the overhead cap, and the unspent amount transfer requirements. These rules have been amended more than once. Verify the current text before concluding.
How we think about this
The obligation computation and the overhead cap are arithmetic that should be rebuilt in full every year, not carried forward. Whether a specific project genuinely sits within a Schedule VII head, rather than being business development with a CSR label attached, is a substance-over-form judgement, and it is the one place in this test where the auditor's scepticism actually does the work.
This is practical guidance written for audit teams, not an authoritative statement of any standard or statute. Standards, forms and timelines change. Check the current text issued by the ICAI and the relevant authority before relying on anything here in an audit file.
Related resources
- CARO & Companies ActSecretarial compliance checklist for a statutory auditorBoard meeting frequency, statutory registers and ROC filing timeliness, read as evidence of compliance culture rather than a secretarial checklist in its own right.
- CARO & Companies ActCARO 2020 reporting checklist for statutory auditorsThe topic areas CARO reporting covers, what evidence each one needs, and how the clauses fit together across the audit file.
- Related parties & disclosuresIdentifying related parties: the audit starting pointA client declaration is a starting point for the related-party list, not evidence of it. How to build and cross-check the list independently.
- Payroll & employee costDirector remuneration audit under the Companies ActManagerial remuneration limits and approvals, financial statement disclosure, and testing payments against board and shareholder resolutions.
Free tools, no signup
Each one reads a file entirely in your browser — or, for two of them, just answers a few questions — and nothing is ever uploaded.
- Purchase register checkDuplicate payments, round-sum amounts, weekend-dated invoices, incomplete records.
- GSTR-2B reconcilerMatches your purchase register against GSTR-2B — missing invoices either side, amount mismatches.
- Bank reconciliation checkerMatches your cash book against a bank statement — what's outstanding on each side.
- Fixed asset register checkDuplicate asset codes, missing location or useful life, negative net book value.
- Payroll red-flag scannerBank accounts shared across employees, and records missing an ID, PAN or salary.
- CARO applicability checkerAnswer a few questions about the company and see which CARO 2020 clauses likely apply.
- MSME payment delay checkerMSME-flagged invoices paid — or still unpaid — beyond the 45-day Section 22 limit.
- Related-party transaction screenerTransactions above a threshold you set with no approval reference, grouped by counterparty.
- Depreciation useful life checkerCompares a useful life in use against the Schedule II, Part C indicative figure.
- Materiality calculatorOverall and performance materiality against PBT, revenue, assets or equity, with reasoning shown.
- Sample size calculatorStatistical sample size for a test of controls or a substantive test of detail.