CARO 2020 and Fixed Asset Verification: What Actually Drives Compliance Beyond QR Codes and Barcodes
Introduction: A Widely Misunderstood Compliance Requirement
Every statutory audit season brings with it a familiar set of questions from finance teams and management alike. One question that surfaces repeatedly is whether the Companies (Auditor's Report) Order, 2020 (CARO 2020) requires organisations to affix QR codes, barcodes, or RFID tags on their fixed assets as part of audit readiness.
The answer, put plainly, is No.
CARO 2020 does not impose any obligation on companies to implement asset tagging technology. What it does require is something more fundamental — a reliable, structured, and periodically conducted physical verification process for Property, Plant and Equipment (PPE). Understanding this distinction is essential for organisations that may otherwise invest in technology solutions while overlooking the actual compliance expectation embedded within the Order.
This article unpacks what Clause 3(i)(b) of CARO 2020 actually demands, why asset tagging alone cannot satisfy that demand, and what a truly compliant physical verification process looks like.
What Does CARO 2020 Actually Mandate?
The Exact Requirement Under Clause 3(i)(b)
Clause 3(i)(b) of the Companies (Auditor's Report) Order, 2020 casts a specific reporting obligation on the statutory auditor. The auditor is required to examine and report on the following three elements:
- Whether Property, Plant and Equipment have been physically verified by the management at reasonable intervals
- Whether the frequency of such verification is appropriate, keeping in mind the size of the company and the nature of its assets
- Whether any material discrepancies discovered during such verification have been duly accounted for in the books of account
Key Insight: The legislative focus of
Clause 3(i)(b)is squarely on the effectiveness and regularity of the physical verification process — not on the tools or technology employed to carry it out.
The Order does not prescribe any specific methodology. It neither directs companies to conduct manual verification nor does it call for the use of any digital identification system. The determination of how verification is conducted remains entirely within the domain of management discretion.
What the auditor is tasked with evaluating is whether the process, regardless of its form, is capable of:
- Accurately identifying and locating assets
- Detecting material discrepancies between the Fixed Asset Register and the actual physical position
- Generating reliable evidence that can support financial reporting
Asset Tagging: A Useful Tool, Not a Compliance Destination
The Common Misconception
A significant number of organisations operate under the assumption that deploying QR codes, affixing barcodes, or installing RFID readers on their fixed assets automatically translates into CARO compliance. This assumption, while understandable, is fundamentally incorrect.
A QR code is, at its core, a unique identifier. It encodes specific information — typically an asset number or description — and allows that information to be retrieved quickly through a scanner. Nothing more, nothing less.
Consider a scenario where Mr. Sharma, the finance head of a mid-sized manufacturing company, instructs his team to tag all 1,200 assets across three plant locations before the statutory audit. Every machine, vehicle, and piece of equipment is assigned a scannable QR label. The Fixed Asset Register is updated to reflect each tag number.
On the surface, this appears thorough. However, if the underlying Fixed Asset Register already contains:
- Duplicate entries for assets acquired in different financial years
- Incorrect location mapping — assets recorded under one plant but physically present at another
- Assets that have been disposed of but never removed from the register
- Missing serial numbers or descriptions that do not correspond to actual equipment on the ground
...then affixing a QR tag to each asset does not cure any of these deficiencies. The register remains inaccurate. The discrepancies remain undetected. And the organisation remains non-compliant in the eyes of CARO 2020, irrespective of how sophisticated its tagging system appears.
What Tagging Can and Cannot Do
| Aspect | Asset Tagging Capability |
|---|---|
| Unique asset identification | ✅ Yes |
| Faster scanning during verification | ✅ Yes |
| Correction of duplicate entries in Fixed Asset Register | ❌ No |
| Detection of missing or disposed assets | ❌ No (without prior verification) |
| Ensuring accuracy of asset descriptions and locations | ❌ No |
| Standalone CARO compliance | ❌ No |
The takeaway is clear: asset tagging improves efficiency; it does not guarantee accuracy.