How to Start a Travel Agency in India: A Proven Guide for 2025

What is Secretarial Audit?

A Secretarial Audit is an independent verification of a company’s compliance with corporate laws, rules, and regulations.

It helps companies to:

• Detect instances of non-compliance early.
• Promote good governance and transparency.
• Ensure that legal and procedural requirements are consistently met.

The audit is conducted by an independent professional, usually a Company Secretary (CS) holding a valid Certificate of Practice issued by the Institute of Company Secretaries of India (ICSI).

Secretarial Audit Applicability

Under the Companies Act, 2013, certain classes of companies are required to undergo a Secretarial Audit.

It is mandatory for:

• All Listed Companies.
• All Public Companies with:
  
  • Paid-up Share Capital of ₹50 crore or more, or
  • Turnover of ₹250 crore or more.
• All types of companies (including Private Companies) having outstanding borrowings of ₹100 crore or more from banks or financial institutions.

Secretarial Audit Report

The Secretarial Audit Report is the formal output of the audit process. It:

• Certifies whether the company is in compliance with applicable laws.
• Identifies any governance risks or gaps.
• Highlights areas of non-compliance and recommends corrective actions.

The report is prepared in Form MR-3, submitted to the Board of Directors, and included in the company’s Annual Report. As per Section 204 of the Companies Act, 2013, the audit can only be conducted and the report issued by a:

• Practising Company Secretary (PCS).
• Holding a valid Certificate of Practice from ICSI.

Scope of Secretarial Audit

The scope of a Secretarial Audit is broad and spans multiple laws, including but not limited to:

• Companies Act, 2013
• Securities Laws, including:
  
  • SEBI (LODR) Regulations
  • SEBI Takeover Code
  • SEBI Insider Trading Regulations
  • SEBI Listing Agreement
• Foreign Exchange Management Act (FEMA)
• Labour Laws
• Environmental Laws
• Industry-specific Regulations
• Secretarial Standards issued by ICSI

Additionally, the Secretarial Auditor also:

• Reviews the company’s systems and processes for compliance.
• Examines the Board structure and its functioning.
• May rely on reports from other professionals (auditors, legal counsel) for certain compliance areas.
  
  

{{comapany-reg-cta}}

Eligibility Criteria for the Appointment of a Secretarial Auditor

To be appointed as a Secretarial Auditor, the individual must:

• Be a qualified Company Secretary (CS) and a member of ICSI.
• Hold a valid Certificate of Practice (CoP) issued by ICSI.
• Have undergone relevant training in corporate governance and compliance.
• Maintain professional ethics and conduct in line with ICSI guidelines.

Only a Practising Company Secretary (PCS) is authorised to conduct and issue a Secretarial Audit Report.

Process of Secretarial Audit

The typical step-by-step process for conducting a Secretarial Audit is:

1. Preparation of a Compliance Checklist:
   Based on applicable laws and regulatory frameworks.
   
   
2. Compliance Verification:
   The auditor examines the company’s records, registers, filings, and processes.
   
   
3. Management Interaction:
   Discusses preliminary findings and areas of concern with management.
   
   
4. Recommendations and Corrective Actions:
   Advises management on how to address any gaps or non-compliance issues.
   
   
5. Preparation of the Final Report (MR-3):
   The auditor formally documents observations and recommendations.
   
   
6. Filing and Disclosure:
   The report is submitted to the Board and included in the Annual Report as required.

Features of Company Secretarial Audit

A Secretarial Audit is distinguished by several key features:

• Independent Audit:
  Conducted by an external Practising Company Secretary.
  
  
• Comprehensive Scope:
  Covers company law, securities law, tax law, labour law, environmental law, and other applicable legal frameworks.
  
  
• Systematic & Evidence-Based:
  Based on a thorough review of records and procedures.
  
  
• Board-Level Reporting:
  Findings and recommendations are directly reported to the Board of Directors.
  
  
• Governance-Focused:
  Designed to strengthen the company’s corporate governance practices.

Punishment for Default Secretarial Audit

Non-compliance with Secretarial Audit provisions carries penalties under:

Section 204(4) of the Companies Act, 2013:

The company, every officer in default, and the PCS (if found guilty) are liable to a fine of up to ₹5 lakh.

Section 448 (False Statements):

• Imprisonment up to 10 years, and/or
• Fine up to ₹10 lakh for making false statements in the audit report.

The Company Secretaries Act, 1980:

Disciplinary action against the Company Secretary may include:

• Suspension or cancellation of the Certificate of Practice.
• Monetary penalties.
• Professional misconduct proceedings.

Objectives of Secretarial Audit

The key objectives of Secretarial Audit are:

• Ensure the company complies with legal and regulatory frameworks.
• Identify non-compliance issues before they become liabilities.
• Promote good corporate governance.
• Protect the interests of stakeholders- investors, employees, customers, and regulators.
• Help management take corrective actions proactively.
• Prevent penalties and legal actions for non-compliance.

Benefits of Secretarial Audit

Conducting a Secretarial Audit offers many advantages:

• Enhances the company’s compliance culture.
• Reduces legal risks and the likelihood of penalties.
• Supports better corporate governance and transparency.
• Increases stakeholder confidence- important for investors and regulators.
• Helps Directors and Management make more informed decisions.
• Facilitates continuous improvement in internal processes and systems.

Frequently Asked Questions

Importance of a Digital Signature Certificate

The importance of a Digital Signature Certificate (DSC) lies in its ability to provide strong authentication, integrity, and proper encryptions in digital transactions and communications.

Here are several key reasons why DSCs are important and why you should apply for one as a founder:

1. Authentication

• DSCs verify the identity of individuals, organizations, or devices involved in digital transactions, ensuring that the sender is who they claim to be.

2. Integrity

• Digital signatures created using DSCs ensure the integrity of electronic documents or messages by detecting any unauthorized changes or tampering.

3. Security

• DSCs use strong cryptographic techniques to protect sensitive information and prevent unauthorized access.

4. Legal Recognition

• In India, many industries and regulatory frameworks require the use of DSCs for specific types of transactions or communications to comply with security and privacy regulations.

5. Government Services

• DSCs play an important role in the company registration process irrespective of the company type. Accessing government services, filing tax returns, or participating in e-tendering processes require digital signatures for authentication and authorization.

6. Efficiency

• DSCs streamline digital workflows by enabling secure and paperless transactions without the physical presence.

Overall, DSCs offer numerous benefits, including enhanced security, legal validity, efficiency, and cost savings, making them indispensable for digital transactions and communications

Different Classes of Digital Signature Certificates (DSCs)

Certifying authorities issue 3 types of DSCs to accommodate various needs and purposes.The type of applicant and the intended use of the Digital Signature Certificate determine the specific kind of DSC that should be sought based on the requirements.

Class 1 DSC:

• These certificates are issued for individuals or private users and are primarily used for email communication and basic transactions.
• Verification requirements are minimal, typically involving email validation or verification of basic personal information.

Class 2 DSC:

• Class 2 certificates are used for both individual and organizational purposes and offer a higher level of security and trust compared to Class 1.
• To obtain a Class 2 DSC, the applicant's identity is verified against a trusted government-issued identity document, such as a passport or driver's license.

Class 3 DSC:

• Class 3 certificates provide the highest level of security and are typically used for online transactions involving high-value financial transactions, e-commerce, and government applications.
• The verification process for Class 3 DSCs involves rigorous identity verification procedures, including in-person verification and submission of supporting documents.

Certifying Authorities in India

Certifying Agencies are designated by the office of the Controller of Certification Agencies (CCA) in accordance with the provisions of the IT Act, 2000. Currently, there are eight Certification Agencies authorized by the CCA to issue Digital Signature Certificates (DSCs).

Format of a Digital Signature Certificate

A DSC typically contains the following components:

1. Public Key

• A cryptographic key that is made publicly available and used to verify digital signatures created by the corresponding private key.

2. Private Key

• A secret key that is securely held by the owner and used to create digital signatures for documents or messages.

3. Certificate Information

• Details about the certificate, including the issuer (Certifying Authority), the validity period, a unique identifier, the subject (owner), and the digital signature of the CA to confirm its authenticity.

4. Digital Signature

• A unique digital signature generated using the private key of the certificate, which can be verified using the corresponding public key.

The format of a Digital Signature Certificate (DSC) can vary depending on the issuing Certificate Authority (CA) and the type and class of the certificate.

Documents required for obtaining a Digital Signature Certificate

The documents required for obtaining a Digital Signature Certificate (DSC) include:

• Proof of Identity: Copy of any one of the following government-issued identity documents attested by a Gazetted officer:
  • Passport
  • Aadhaar Card
  • PAN Card
  • Voter ID Card
• Proof of Address: Copy of any one of the following documents showing the applicant's residential address attested by a Gazetted officer:
  • Utility bill (electricity, water, gas, telephone)
  • Bank statement
  • Rent agreement
• Passport Size Photograph: Recent passport-size color photograph of the applicant.
• Self-attested Copy of PAN Card: A self-attested photocopy of the applicant's PAN Card.
• Organization Documents (if applicable):For organizations, additional documents such as the Certificate of Incorporation, Memorandum of Association (MOA), Articles of Association (AOA), or Partnership Deed may be required.

It's important to note that the specific documents required may vary depending on the type of Digital Signature Certificate (e.g., Class 1, Class 2, Class 3), the Certification Authority (CA) issuing the certificate, and the purpose for which the certificate is being obtained.

How to apply for a Digital Signature Certificate?

Razorpay Rize simplifies this process by streamlining e-filing on the MCA portal (company registration process), and as part of the package, you can acquire 2 Digital Signature Certificates for the involved directors/partners.

Note: It's necessary to obtain a Digital Signature Certificate (DSC) of either the Class 2 or Class 3 signing certificate category issued by a licensed Certifying Authority (CA) to facilitate e-filing on the MCA Portal for company registration processes.

Alternatively, you also have the option to apply for DSCs through designated certifying agencies through the following steps.

• Choose a Certifying Authority (CA) accredited by the Controller of Certification Agencies (CCA) under the provisions of the IT Act, 2000.
• Determine the type and class of DSC required based on your needs and the level of security required (e.g., Class 1, Class 2, Class 3).
• Gather the necessary documents, including proof of identity, proof of address, passport-size photograph, self-attested copy of PAN card, and any organization-related documents (if applicable).
• Obtain and fill out the DSC application form provided by the chosen Certifying Authority. Fill in the necessary details like the Class of the DSC, validity, type, applicant name and details, residential address, etc.
• Undergo the identity verification process as per the CA's requirements, which may involve in-person verification or online verification, depending on the type of DSC and the CA's policies.
• Pay the prescribed fees.
• Upon successful verification and payment, the Certifying Authority will generate a unique key pair consisting of a public key and a corresponding private key.
• Once the key pair is generated, the Certifying Authority will issue the Digital Signature Certificate.
• Install the DSC on the appropriate device or token as per the CA's instructions.

Validity of the Digital Signature Certificate

Digital Signature Certificates (DSCs) are commonly issued with either a one-year validity or a two-year validity period.

These certificates can be renewed upon expiry of the initial validity period. Renewal procedures typically involve submitting updated documentation and undergoing identity verification processes, similar to the initial application process.

Fees for the Digital Signature Certificate in India

If you’re registering your business with Razorpay Rize, DSCs are commonly included in the package regardless of the company type.

In the case of direct applications, the fees include various components, including the one-time cost of the medium (such as a USB token), the Digital Signature Certificate (DSC) issuance cost, the renewal cost after the validity period expires, and the support costs (if any).

The costs, as mentioned on the MCA website, are as follows-

Frequently Asked Questions

What is Form MGT-8?

Form MGT-8 is a certification issued by a practising Company Secretary to validate that a company’s annual return complies with the provisions of the Companies Act of 2013. It assures that the company has accurately disclosed its financial and operational details, ensuring transparency and accountability.

The certificate covers aspects such as shareholding structure, board composition, meetings, and statutory records.

When Is Form MGT-8 Required?

Form MGT-8 is required in specific scenarios where companies exceed certain financial thresholds or have a specific status. It is mandatory for:

• Listed companies
  
• Companies with a paid-up share capital of ₹10 crores or more
  
• Companies with a turnover of ₹50 crores or more
  

Form MGT-8 Format

Essential Components of the Form

Form MGT-8 is a certification report that includes various essential components to ensure compliance with the Companies Act, 2013. These components typically include:

• Company Details – Name, registration number, and details of the company.
  
• Certificate of Compliance – A statement certifying the company's adherence to the Act’s provisions.
  
• Verification of Financial Records – Confirmation that financial statements have been audited and filed according to the law.
  
• Board and Shareholder Meeting Details – Confirmation of meetings held and compliance with relevant provisions.
  
• Transaction and Borrowing Details – Verification of loans, borrowings, and any changes in share capital.
  
• Auditor Details – Information related to the appointment and reappointment of auditors.
  

Structure and Key Sections

Form MGT-8 follows a structured format, typically divided into the following sections:

1. Part A: Company Overview
   
   • Includes company name, CIN (Corporate Identification Number), and registered address.
     
2. Part B: Compliance Statements
   
   • Lists the provisions of the Companies Act, 2013 under which the company is required to comply. It includes details on financial statements, board meetings, and share capital transactions.
     
3. Part C: Certification
   
   • The company secretary provides a certificate stating that the company has adhered to all the relevant provisions of the Act.
     
4. Part D: Signature and Date
   
   • The form ends with the signature of the certifying company secretary, along with the date of certification.
     

Applicability of Form MGT-8

As per Section 92(2) of the Companies (Management and Administration) Rules, 2014, certain companies must have their annual returns certified by a practising Company Secretary. This applies to:

• Listed companies
  
• Companies with a paid-up share capital of ₹10 crores or more
  
• Companies with a turnover of ₹50 crores or more
  

This certification ensures the company meets all statutory compliance requirements before submitting its annual return.

Related Read: LLP Form 11; Annual Return

Contents of Form MGT-8

Form MGT-8 contains several key elements that ensure a company is in compliance with the Companies Act of 2013. The contents include:

• Company details: Name, registration number, and principal business activities.
• Share capital structure: Details of shares issued and ownership distribution.
  
• Compliance confirmation: Verification of board meetings, statutory filings, and regulatory approvals.
  
• Certifications: Declaration by the practising Company Secretary affirming that the company has adhered to all relevant legal provisions.
  

Contents of the Form MGT-8 Report

The company secretary must certify that the annual return of the company is accurate and in compliance with the provisions of the Companies Act, 2013. The key points covered in the report include:

• Status of the Company – The company’s legal status under the Companies Act.
• Maintenance of Registers and Records – Ensuring records are updated within prescribed timelines.
  
• Filing of Forms and Returns – Confirmation that necessary filings were made to the appropriate authorities.
  
• Board Meetings – Verification that board and committee meetings were conducted correctly.
  
• Register of Members/Shareholders – Confirmation of compliance with closure and maintenance requirements.
  
• Loans to Directors – Adherence to provisions under Section 185 of the Companies Act for loans to directors.
  
• Changes in Share Capital – Details on share capital transactions (issue, transfer, buyback, etc.).
  
• Dividend Rights – Assurance that dividend-related processes have been followed.
  
• Investor Education and Protection Fund – Confirmation of amounts moved to this fund as per Section 125.
  
• Financial Statements – Certification that audited financial statements are signed and compliant with Section 134.
  
• Director & KMP Appointments – Verification of appointments, reappointments, and remuneration of directors and key managerial personnel.
  
• Auditor Appointments – Confirmation that auditor appointments comply with Section 139.
  
• Approval from Authorities – Ensuring necessary approvals have been obtained.
  
• Acceptance of Deposits – Compliance with the acceptance, renewal, and repayment of deposits.
  
• Borrowings and Charges – Details on borrowings and matters related to charges.
  
• Loans/Investments/Guarantees – Compliance with Section 186 for providing loans/investments to bodies corporate or individuals.
  
• Alteration of AoA/MoA – Confirmation of any changes to the Articles or Memorandum of Association.
  

Looking to register your Sole Proprietorship Company? Head over to Razorpay Rize and complete your company registration!

Compliance Aspects

The compliance aspects covered by Form MGT-8 include:

• Corporate Governance: Ensuring proper board structure and transparency in decision-making.
• Regulatory Filings: Confirmation that the company has submitted all required returns and documents.
  
• Financial Reporting: Validation of financial statements and records.
  
• Board Meetings & Resolutions: Verification of proper conduct of board meetings and resolutions.
  
• Loans & Related Party Transactions: Ensuring transactions comply with legal provisions.
  
• Approvals & Authorizations: Confirmation that necessary approvals from the Central Government or regulatory authorities are obtained where required.
  

Consequences of Non-Compliance

Failure to comply with the requirements of Form MGT-8 can result in serious consequences, including:

• Penalties and Fines: Companies and responsible officers may face monetary penalties for non-compliance.
• Legal Action: Regulatory authorities may initiate legal proceedings against defaulting companies.
  
• Reputation Damage: Non-compliance affects investor confidence and the company's credibility.
  
• Operational Restrictions: Companies may face restrictions in obtaining loans, tenders, and other business opportunities.
  

Conclusion

Form MGT-8 is a critical compliance document that ensures companies adhere to the Companies Act of 2013. It is mandatory for listed companies and those meeting specific financial thresholds.

By obtaining certification from a practising Company Secretary, companies can confirm their adherence to legal requirements, reducing regulatory risks. Understanding its applicability, format, and compliance aspects helps businesses maintain transparency and corporate governance.

Companies must meet the necessary compliance requirements to avoid penalties and safeguard their business interests.

Frequently Asked Questions