Skip to main content

Indian Economy

SEBI Allows Cost Accountants to Audit Research Analysts: What NRIs Must Do Now

SEBI's March 25 circular expanding audit eligibility to Cost Accountants reshapes compliance for every registered Research Analyst and Investment Adviser in India.

By NH Research

SEBI Opens RA and IA Audits to Cost Accountants: The NRI Compliance Angle No One Is Talking About

SEBI issued two circulars on March 25, 2026, formally clarifying that members of the Institute of Cost Accountants of India are eligible to conduct mandatory annual compliance audits for registered Research Analysts and Investment Advisers. The move expands the qualified auditor pool by roughly 100,000 professionals at a moment when India's intermediary ecosystem is straining under the weight of 150 million demat accounts and a growing base of registered advisers. For NRI investors relying on Indian RAs and IAs to manage their equity exposure, this isn't just a procedural footnote — it changes who can sign off on your adviser's compliance certificate, and whether that sign-off is valid.

Key Points

    • SEBI's March 25, 2026 circulars explicitly recognise members of the Institute of Cost Accountants of India (CMAs) as eligible auditors for both Research Analysts and Investment Advisers.
    • The clarification amends SEBI's Master Circular for Research Analysts and Investment Advisers dated February 6, 2026, and takes effect immediately.
    • Qualified auditors now include members from three bodies: ICAI (Chartered Accountants), ICSI (Company Secretaries), and ICMAI (Cost and Management Accountants).
    • Annual audit reports must be completed within six months of each financial year-end. NRI investors should confirm the exact submission deadlines directly with their adviser or SEBI's published circulars, as these are defined in the operative regulatory text.
    • NRI investors should verify their adviser's auditor credentials against all three recognised bodies and check audit disclosure on the adviser's website.
    • SEBI has enforcement powers that include financial penalties and suspension of registration for RA and IA compliance failures. Investors should refer to SEBI's enforcement orders database for the current penalty framework.

From Two Bodies to Three: What Actually Changed on March 25

Before March 2026, the practical reality in the field was that Chartered Accountants from ICAI and Company Secretaries from ICSI were the recognised auditors for RA and IA compliance reviews. The Institute of Cost Accountants of India, despite its members holding formal CMA designations and specialising in exactly the kind of regulatory compliance work these audits demand, wasn't explicitly included. That created ambiguity — some CMAs were being turned away, others were conducting audits without clear regulatory backing.

The March 25, 2026 circulars resolve that ambiguity with an explicit public clarification, likely issued because ICMAI sought formal acknowledgment to remove any remaining doubt in the field. The effective date is immediate.

Professional BodyDesignationPre-March 2026 StatusPost-March 2026 Status
ICAI (Institute of Chartered Accountants of India)CAEligibleEligible
ICSI (Institute of Company Secretaries of India)CSEligibleEligible
ICMAI (Institute of Cost Accountants of India)CMANot explicitly eligibleEligible (clarified)

ICAI has approximately 380,000 members. ICSI has approximately 230,000. ICMAI adds roughly 100,000 CMAs to the mix. The combined pool of eligible auditors now sits at over 700,000 professionals across the three bodies, which is a material change in capacity terms.

Why SEBI Needed to Fix This Capacity Problem Now

India's demat account base crossed 150 million accounts, and the number of SEBI-registered intermediaries has grown proportionally. The registered Investment Adviser population includes approximately 470 individual advisers and 530 non-individual entities, all of whom need annual audits. Research Analysts add to that load. With audit completion and submission deadlines concentrated in a narrow window each year, the demand was creating a real bottleneck.

Smaller and individual RAs and IAs were feeling this most acutely. Individual Investment Advisers operate under client number caps, which limits their revenue. Paying a Big Four-affiliated CA firm for an annual compliance audit was eating into margins that weren't large to begin with. CMAs, whose core expertise covers cost optimisation, regulatory compliance reviews, AML process evaluation, and record-keeping verification, are well-suited for this work and are expected to price their services at a meaningful discount to CAs.

This fits neatly into SEBI's broader 2026 reform posture. The regulator relaxed reporting requirements for stock brokers on March 23, 2026. It eased NISM certification requirements for non-core Persons Associated with Research Services on March 11, 2026.

It removed the Letters of Confirmation requirement and enabled direct demat crediting on January 30, 2026. The CMA inclusion is part of the same thread: reduce friction, lower costs, expand capacity, and keep the intermediary base growing at a pace that matches the investor base.

What the Audit Actually Covers — and Where Advisers Get Caught

The annual compliance audit for RAs and IAs isn't a light-touch formality. The auditor goes through SEBI regulations and all applicable circulars line by line, checks KRA and CKYC compliance, reviews AML policy implementation, examines record-keeping practices, and verifies conflict of interest disclosures. For Investment Advisers, the audit includes a client fund segregation certificate. For Research Analysts, it covers independence standards and checks whether the analyst holds more than the permitted threshold in securities they cover.

Adverse findings must be disclosed publicly. RAs and IAs are required to publish their audit status on their websites and share reports with clients. That's not a soft obligation — it's a hard regulatory requirement, and SEBI's enforcement history shows it takes non-disclosure seriously.

The areas where advisers most commonly run into trouble are AML documentation gaps, inadequate conflict of interest disclosures, and sloppy record-keeping around client onboarding. CMAs, whose training emphasises process documentation and compliance review, are arguably as well-equipped as CAs to catch these failures. The argument that only CAs should conduct these audits was never particularly strong on the merits.

The NRI Angle: Verification Is Now Your Responsibility

NRI investors using SEBI-registered Research Analysts or Investment Advisers for Indian equity exposure have always been indirectly protected by the annual audit requirement. SEBI's expansion of eligible auditors doesn't change the validity of audits previously conducted by CAs or CSs under the rules in force at the time — those remain fully valid. What it does mean is that going forward, you have a wider set of credentials to verify when checking your adviser's audit status.

A CMA conducting an audit for your adviser is fully legitimate under SEBI's current framework. But that CMA must be a registered member of ICMAI. And the audit must have been completed and submitted within the mandated deadlines as specified in SEBI's operative circulars — confirm those dates directly from the relevant regulatory text rather than relying on secondary sources.

NRIs also need to keep the FEMA and RBI compliance layer in mind. Receiving investment advice from a SEBI-registered IA is legally permissible for NRIs, but investments must route through NRE or NRO accounts under RBI's Non-Debt Instruments Rules, 2019, and repatriation from NRO accounts is capped at the equivalent of USD 1 million per financial year. An adviser whose annual audit is non-compliant isn't just a paperwork problem — it's a signal that the firm's overall compliance culture may be weak, which matters when you're routing cross-border capital through them.

    • Check your adviser's SEBI registration on sebi.gov.in. RA registration numbers begin with INH; IA registration numbers begin with INA.
    • Ask for the name and registration number of the auditor who conducted the most recent annual compliance audit.
    • Verify the auditor's credentials against ICAI, ICSI, or ICMAI membership records, depending on the designation claimed.
    • Confirm the audit was completed and submitted to SEBI within the deadlines specified in the applicable SEBI circulars for the relevant financial year.
    • Check the adviser's website for published audit status and any disclosed adverse findings.
    • Review SEBI's enforcement orders database for any actions against the firm in the past three years.

SEBI's Broader Agenda and What It Signals for the Intermediary Sector

SEBI Chairman Tuhin Kanta Pandey has publicly flagged the declining trend in registered Investment Advisers since 2021, even as retail investor participation has surged. That's a structural mismatch the regulator is trying to fix by reducing the cost and friction of operating as a registered intermediary. The SEBI SETU digital platform, announced as an end-to-end compliance guidance system for IAs, is part of the same effort.

The RAASB, the self-regulatory body overseeing Research Analysts, is also being directed to update its bye-laws to align with SEBI's evolving certification and audit directives. The March 11, 2026 circular specifically directed RAASB to amend its framework for the new PARS certification structure. These aren't isolated changes — they're part of a coordinated effort to build a more scalable, lower-cost compliance infrastructure for India's intermediary sector.

The bull case for this reform wave is straightforward: more eligible auditors mean lower costs and faster turnaround, which encourages more qualified professionals to register as RAs and IAs, which gives retail and NRI investors better access to regulated advice. The bear case is that expanding the auditor pool without raising audit quality standards could dilute the rigour of compliance reviews. SEBI hasn't announced any new quality benchmarks or standardised audit frameworks alongside the CMA inclusion, and that's a gap worth watching.

On balance, the capacity argument looks stronger in the near term, and the quality risk — while real — is manageable given ICMAI's existing competency in compliance-focused work. The number to watch is the registered IA count over the next 12 months — if SEBI's reform wave is working, that number should start climbing back toward and past its 2021 peak. For NRI investors, the immediate action is simple: don't wait for your adviser to volunteer their audit status.

Ask for it, verify the auditor's credentials, and treat any hesitation in response as a red flag worth acting on.