For nearly a decade, cost audit compliance sat quietly at the bottom of most companies’ compliance checklists. Form CRA-4 was the filing nobody chased, the report nobody read outside the finance team, and the section — Section 148 of the Companies Act, 2013 — that most CFOs assumed was somebody else’s problem. Auditors were appointed, sometimes almost as an afterthought, and reports were filed whenever convenience permitted.
That era is over. MCA’s Cost Audit Branch has increasingly cross-checked appointment intimations against actual report filings and started issuing show cause notices to companies that failed to appoint cost auditors on time or failed to file their Cost Audit Reports.
Some companies have been caught trying to game the system by appointing cost auditors for multiple years in one go, hoping to dodge scrutiny. It hasn’t worked. This blog breaks down everything you need to know — the law, the terminology, the real penalties, an actual court case, and the 2025 rule changes — so that your company doesn’t end up staring at a show cause notice of its own.
1. What Exactly Is a Cost Audit — And Why Does the Government Care?
A cost audit is an independent examination of a company’s cost accounting records — how much it actually costs to make a product or deliver a service, right down to material, labour, and overhead. Unlike a statutory financial audit (under Section 143), which checks whether your books present a “true and fair” financial picture, a cost audit checks whether your cost records are accurate, complete, and comply with the Cost Accounting Standards prescribed by the Institute of Cost Accountants of India (ICMAI).
Why does this matter to the government? Because in sectors where pricing has a direct bearing on public interest — pharmaceuticals, electricity, petroleum, fertilisers, telecom, sugar, defence production, and several core manufacturing industries — the Central Government wants visibility into whether costs are being loaded, inflated, or misrepresented. Cost audit data feeds into pricing regulation, anti-profiteering assessments, subsidy calculations, and industry benchmarking. It is, in short, a transparency tool with teeth.
2. Who Is a Cost Auditor?
A cost auditor is a Cost Accountant (a member of the Institute of Cost Accountants of India, holding a valid certificate of practice) or a firm of cost accountants, appointed by the Board of Directors of the company to conduct the cost audit. Importantly:
- A cost auditor cannot be the same person or firm that is the company’s statutory (financial) auditor. The two roles are kept strictly separate.
- The qualifications, disqualifications, rights, and duties applicable to statutory auditors under Chapter X of the Companies Act apply mutatis mutandis to cost auditors as well — meaning a cost auditor must be independent and owes the same standard of professional diligence.
- Before appointment, the company must obtain the written consent of the proposed cost auditor and a certificate that the appointment, if made, will be within the prescribed limits.
3. Who Actually Needs a Cost Audit? — Applicability Explained Simply
This is where most companies trip up. Applicability isn’t a single blanket rule — it works in two layers under the Companies (Cost Records and Audit) Rules, 2014, framed under Section 148.
Layer 1 — Do you need to maintain cost records at all?
Under Rule 3, every company (including foreign companies) engaged in production of goods or providing services listed in Table A (regulated sectors) or Table B (non-regulated sectors) must maintain cost records in Form CRA-1, provided its overall turnover from all its products and services in the immediately preceding financial year is ₹35 crore or more. This obligation applies regardless of whether the company is ultimately required to get those records audited.
Layer 2 — Do those records need to be audited?
This is governed by Rule 4, and the thresholds are higher and sector-dependent:
Sector | Overall company turnover | Turnover of individual product/service |
Regulated sectors (e.g., telecom, electricity, petroleum, drugs & pharmaceuticals, fertilisers, sugar) | ₹50 crore or more | ₹25 crore or more |
Non-regulated sectors (e.g., iron & steel, cement, paper, edible oil, machinery, textiles) | ₹100 crore or more | ₹35 crore or more |
Both conditions — overall turnover and product/service-specific turnover — must be satisfied simultaneously for cost audit to become mandatory.
Practical tip: Companies often maintain cost records diligently (because Rule 3 catches them at a low ₹35 crore threshold) but wrongly assume that maintaining records is the end of the obligation. It is not. Every year, the finance and secretarial teams must re-check Rule 4 thresholds afresh, because a company can slide in or out of cost audit applicability as turnover fluctuates year to year.
4. Key Exemptions — When You Can Breathe Easy
Even if a company technically crosses the Rule 4 thresholds, cost audit is not required if it falls into one of these carve-outs under Rule 4(3):
- Export-driven companies — where revenue from exports in foreign exchange exceeds 75% of total revenue.
- Companies operating in a Special Economic Zone (SEZ).
- Companies generating electricity for captive consumption through a Captive Generating Plant.
Additionally, if the company falls entirely outside the goods/services listed in Table A or Table B, cost audit simply never enters the picture, no matter how large the turnover.
5. The Compliance Trail: CRA-1 to CRA-4, and the Timelines That Matter
Cost audit compliance runs through a chain of forms and deadlines, and it is precisely at these checkpoints that companies default:
Step | Requirement | Timeline |
CRA-1 | Maintenance of cost records | Ongoing, from the start of the financial year |
Board appointment | Appointment of Cost Auditor by Board of Directors | Within 180 days of commencement of the financial year |
CRA-2 | Intimation of appointment of cost auditor to the Central Government | Within 30 days of the Board meeting appointing the auditor (or 180 days of commencement of the FY, whichever is earlier) |
CRA-3 | The Cost Audit Report prepared by the cost auditor and submitted to the Board | Within 180 days from the closure of the financial year |
CRA-4 | Filing of the Cost Audit Report with the Central Government, in XBRL format | Within 30 days of receipt of the Cost Audit Report by the Company from the Cost Auditor |
Missing any one of these links — a late CRA-2, a delayed CRA-4, or worse, no filing at all — is exactly what MCA’s Cost Audit Branch has been hunting for.
6. Why Is MCA Suddenly Issuing Show Cause Notices?
Here’s the part that should genuinely get compliance officers’ attention. The Cost Audit Branch of MCA has, over the last couple of years, gone back through filings for FY 2023-24 and earlier years and systematically flagged two categories of default:
Ground 1 — Cost Audit Report not filed, or filed late.
Where cost audit was clearly applicable (based on the company’s own disclosures and filings) but Form CRA-4 either was never filed or was filed beyond the prescribed 30-day window.
Ground 2 — Non-appointment / questionable appointment of cost auditors.
MCA has specifically noted a pattern where companies, having missed appointing a cost auditor on time, tried to retroactively “fix” the problem by appointing a cost auditor for multiple years in a single go — essentially bundling years together to create the appearance of continuity and dodge scrutiny for the earlier lapses. MCA has not been fooled by this; such notices squarely reference the default years.
The notices are legally anchored in Section 148(6) (obligation to submit the report to the Board and file it with the Central Government along with full information on every reservation or qualification), Section 148(8) (the penalty-triggering provision), Section 403 (fee/penalty for delayed filing), and Rule 6 of the Companies (Cost Records and Audit) Rules, 2014.
What has changed operationally is data intelligence — MCA is cross-referencing MGT-7/AOC-4 disclosures (where companies state whether cost audit applies to them), CRA-2 appointment filings, and CRA-4 report filings against each other. A mismatch between “cost audit applicable: yes” and “CRA-4 filed: no” is now an easily flaggable red flag on MCA’s own systems, and increasingly, on HSN-code-level trade data too.
7. The Money Question: What Are the Actual Penalties?
Section 148(8) borrows its penal architecture directly from Section 147 of the Companies Act, and it hits three separate parties differently:
(a) The Company — punishable with a fine of not less than ₹25,000, extendable up to ₹5,00,000 (Section 147(1)).
(b) Every officer of the company who is in default (typically the CFO, Company Secretary, or the Director responsible for compliance) — punishable with a fine of not less than ₹10,000, extendable up to ₹1,00,000 for each officer.
(c) The Cost Auditor, if the default lies with them (e.g., knowingly furnishing an incomplete or incorrect report), is separately punishable under Section 147(2) to (4):
- Ordinary default: Fine of not less than ₹25,000, extendable up to ₹5,00,000, or four times the remuneration paid to the auditor — whichever is lower.
- Wilful or fraudulent default (knowingly or wilfully contravening the provisions with intent to deceive the company, its shareholders, creditors, or tax authorities): Imprisonment up to one year, together with a fine of not less than ₹50,000, extendable up to ₹25,00,000, or eight times the remuneration — whichever is lower.
On top of the substantive penalty, Section 403 imposes escalating additional fees for delayed filing of forms like CRA-2 and CRA-4 — the longer the delay, the steeper the multiplier on the normal filing fee, sometimes running into multiples of the base fee for delays beyond a few months.
It is worth flagging that officers-in-default are not automatically shielded just because they weren’t personally involved in cost accounting — the “officer in default” net under the Companies Act typically pulls in whole-time directors, the CFO, and the Company Secretary, unless the company can clearly demonstrate who was specifically tasked with (and failed at) this particular compliance.
8. Real-Life Case Law: When Cost Audit Defaults Reach the Courtroom
Show cause notices are not the end of the road — unresolved defaults can, and do, escalate into criminal prosecution. A useful illustration is the Telangana High Court’s decision in M/s. Nusun Genetic Research Ltd. & Others, M/s. Vibha Agro Tech Ltd. & Others, and M/s. Seed Innovations Pvt. Ltd. & Others v. Registrar of Companies (Andhra Pradesh and Telangana) (2023).
In this matter, the Registrar of Companies had filed criminal complaints before the Special Judge for Economic Offences at Hyderabad against several seed and agri-biotech companies and their officers, alleging violation of Section 148(8), punishable under Section 147 of the Companies Act, 2013 — essentially, failure to comply with cost audit obligations. The companies approached the Telangana High Court seeking to have the complaints quashed. The High Court declined to quash the proceedings at the threshold stage, holding that the factual questions raised by the companies were matters to be examined and adjudicated by the trial court, not disposed of in a writ petition.
The takeaway for businesses is important: courts are generally reluctant to short-circuit cost-audit-related criminal complaints at an early stage. Once a complaint is filed, companies are typically pushed into a full trial process — with all the cost, reputational exposure, and management bandwidth that entails — rather than getting an easy exit. Prevention, quite plainly, is far cheaper than defence.
Beyond this, the broader pattern seen across Registrar of Companies adjudication orders in 2024-25 (across various compliance heads, not limited to cost audit) shows penalties for corporate lapses ranging from modest amounts of around ₹10,000 for minor procedural defaults, all the way up to figures exceeding ₹18,00,000 in aggregate across companies, directors, and multiple years of continuing default — a reminder that these are not one-time slap-on-the-wrist fines. Under Section 450/Section 403-linked continuing default provisions, penalties can compound for every day the default continues, which is precisely how modest individual fines snowball into lakhs.
9. What Changed in 2025: The Rules Just Got a Refresh
Companies dealing with cost audit compliance in FY 2025-26 need to be aware of the following significant regulatory developments:
Revised CRA-2 and CRA-4 Forms.
Via Notification G.S.R. 361(E) dated 30th May 2025, MCA notified the Companies (Cost Records and Audit) Amendment Rules, 2025, substituting both Form CRA-2 and Form CRA-4, effective 14th July 2025. The revised forms are noticeably more granular:
- CRA-2 now requires companies to explicitly categorise the nature of appointment (fresh appointment, re-appointment, or appointment to fill a casual vacancy), along with an explicit confirmation that the cost auditor’s written consent has been obtained.
- CRA-4 now captures whether there has been any change in the financial year, whether an AGM extension was obtained (with the relevant SRN details), details of the Board meeting at which the cost audit report was approved, the number of regulated versus non-regulated products/services covered, and — where multiple cost auditors are jointly appointed — whether the filing auditor is acting as the lead auditor.
The clear regulatory intent is better traceability: MCA wants to be able to match every cost audit report to a specific, verifiable appointment, a specific Board approval, and a specific auditor’s accountability — closing exactly the kind of gaps that allowed the “multi-year batch appointment” workaround to occur in the first place.
10. Responding to a Show Cause Notice: What Companies Should Actually Do
If your company receives a show cause notice under Section 148, here is a practical, no-panic checklist:
- Don’t ignore the timeline. Notices typically carry a short response window (commonly 15–30 days). A non-response is treated as an admission and invites escalation to adjudication or prosecution.
- Reconstruct the compliance history. Pull together CRA-2 filings, Board resolutions appointing the cost auditor, CRA-3 reports, and CRA-4 filings (or the absence of them) for every year under scrutiny.
- Identify the actual “officer in default.” Companies often assume the CFO is automatically liable — but the Companies Act requires a factual determination of who was tasked with the compliance. A well-drafted response can meaningfully narrow the exposure.
- Consider the adjudication and compounding route. Where a genuine default has occurred, proactively applying for compounding of the offence under Section 441 (rather than waiting for prosecution) is usually a far less damaging path — it converts a criminal exposure into a monetary settlement.
- Fix the root cause going forward. Build a compliance calendar that tracks the 180-day appointment deadline, the CRA-2 window, and the 30-day CRA-4 filing trigger — tied to Board meeting dates, not just financial year-end dates.
11. The Bigger Picture
The shift here isn’t just procedural — it reflects a broader trend across MCA’s functioning: data-driven, retrospective compliance review. The same pattern that is now visible in cost audit notices has already played out in CSR disclosures, related-party transaction reporting, and beneficial ownership filings. Companies that treated cost audit as a low-priority, back-office formality are discovering — sometimes years after the fact — that the MCA’s records don’t forget.
For companies in regulated and manufacturing sectors, the message is straightforward: cost audit is not a paperwork exercise to be revisited only when convenient. It is a statutory obligation with real teeth, real deadlines, and now, real enforcement.
Need help assessing whether cost audit applies to your company, regularising pending CRA filings, or responding to an MCA show cause notice? Lal Ghai & Associates’ company law and secretarial team works closely with clients across manufacturing, pharmaceuticals, and regulated sectors to keep cost audit compliance — and every other Companies Act obligation — firmly under control. Get in touch with our team at lgassociates.org/contact-us to have your cost audit applicability reviewed today.
Disclaimer: This article is intended for general informational purposes only and does not constitute legal advice. Cost audit applicability and penalty exposure depend on the specific facts of each company; readers are advised to seek professional advice tailored to their circumstances before acting on any information contained herein.