Audit Retention Policy Template for Nigeria
Generate a bespoke document
What is a Audit Retention Policy?
An Audit Retention Policy is a crucial governance document that organizations in Nigeria must maintain to ensure compliance with various regulatory requirements, including CAMA 2020, tax laws, and professional standards. This document becomes necessary when organizations need to establish standardized procedures for maintaining audit records, financial documentation, and related materials. The policy addresses the minimum retention periods required by Nigerian law (typically 6 years for most records), storage methods, security requirements, and destruction procedures. It helps organizations avoid regulatory penalties, maintain proper audit trails, and ensure the availability of critical documentation for future reference or regulatory inspections.
Frequently Asked Questions
Is an Audit Retention Policy legally required for companies in Nigeria?
Yes, under the Companies and Allied Matters Act (CAMA) 2020, all Nigerian companies must maintain proper books of account and retain audit documentation for at least 6 years. While the law doesn't explicitly mandate a formal 'Audit Retention Policy' document, having one ensures systematic compliance with these legal requirements and protects against regulatory penalties.
How long must companies keep audit records under Nigerian law?
Under CAMA 2020, Nigerian companies must retain proper books of account, financial statements, and supporting audit documentation for a minimum of 6 years from the end of the financial year. The Companies Income Tax Act may require longer retention periods for tax-related documents, so many companies adopt a 7-year retention policy to be safe.
Can Nigerian regulators penalize my company for missing audit records?
Yes, failure to maintain proper books of account or audit records can result in significant penalties under CAMA 2020. The Corporate Affairs Commission (CAC) can impose fines, and directors may face personal liability. Additionally, missing records can complicate tax audits and regulatory inspections, potentially leading to further penalties from FIRS.
How is an Audit Retention Policy different from a general Document Retention Policy in Nigeria?
An Audit Retention Policy specifically focuses on financial records, audit documentation, and accounting materials required under CAMA 2020 and tax laws. A general Document Retention Policy covers all company documents including contracts, correspondence, and HR records. The audit policy typically has more stringent requirements and longer retention periods due to regulatory compliance needs.
How long does it typically take to develop an Audit Retention Policy for a Nigerian company?
Creating a comprehensive Audit Retention Policy usually takes 2-4 weeks for most Nigerian companies. This includes reviewing existing document management practices, consulting with finance and legal teams, customizing the policy template, and obtaining board approval. Companies with complex operations or multiple subsidiaries may need 6-8 weeks.
Can I store audit records electronically to comply with Nigerian retention requirements?
Yes, Nigerian law generally accepts electronic storage of audit records, provided they are properly maintained and can be readily accessed when required. However, you must ensure the electronic copies are authentic, complete, and protected against tampering. Many companies maintain both electronic and physical copies of critical documents to ensure compliance.
Which common mistakes should Nigerian companies avoid when implementing audit retention policies?
The most common mistakes include setting retention periods shorter than the 6-year minimum required by CAMA 2020, failing to include all required document types like board resolutions and subsidiary records, and not establishing clear procedures for document destruction after retention periods expire. Many companies also forget to train staff on proper implementation and regular policy updates.
About the Audit Retention Policy
Your organization needs a comprehensive audit retention policy to maintain compliance with Nigeria's complex regulatory framework. This essential governance document establishes clear procedures for preserving audit records, financial documentation, and supporting materials according to legal requirements under CAMA 2020, tax legislation, and professional standards.
When do you need this document?
You require an audit retention policy when establishing your organization's governance framework, preparing for external audits, or ensuring compliance with regulatory requirements. Companies must implement these policies before conducting business operations, particularly when handling financial transactions, maintaining accounting records, or preparing annual financial statements. The policy becomes critical during regulatory inspections, tax audits, or legal proceedings where historical documentation must be produced. Organizations undergoing mergers, acquisitions, or restructuring also need robust retention policies to preserve essential records during transitions.
Key legal considerations
Your policy must address the minimum six-year retention period mandated by CAMA 2020 for books of account, accounting records, and supporting documentation. Consider the Companies Income Tax Act requirements for maintaining tax-related records for six years from transaction dates or assessment completion. Include provisions for anti-money laundering compliance under the Money Laundering (Prevention and Prohibition) Act 2022, which requires extended retention for suspicious transaction records. Address digital storage security, access controls, and backup procedures to prevent unauthorized modification or destruction. Ensure your policy covers proper destruction procedures after retention periods expire, including certificates of destruction and audit trails. Consider industry-specific requirements that may mandate longer retention periods for certain types of records.
Legal requirements in Nigeria
Under Nigerian law, your audit retention policy must comply with multiple regulatory frameworks. CAMA 2020 requires companies to maintain proper books of account for at least six years, including general ledgers, subsidiary books, trial balances, and supporting vouchers. The Financial Reporting Council of Nigeria Act 2011 mandates retention of audit working papers, management letters, and compliance documentation to support financial reporting standards. Tax authorities require preservation of all records supporting income tax computations, VAT returns, and withholding tax documentation under CITA provisions. The Central Bank of Nigeria imposes additional requirements for financial institutions regarding customer records and transaction documentation. Your policy must designate responsible officers for record maintenance, establish secure storage facilities, and implement regular review procedures to ensure ongoing compliance with evolving regulatory requirements.
GOVERNING LAW
Applicable law
This Audit Retention Policy is drafted to comply with Nigeria law. Key legislation includes:
Explore 208,390+ legal templates
Explore 208,390+ legal templates
Genie's Security Promise
Genie is the safest place to draft. Here's how we prioritise your privacy and security.
Your data is private:
We do not train on your data; Genie's AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
We are ISO27001 certified, so your data is secure
Organizational security:
You retain IP ownership of your documents and their information
You have full control over your data and who gets to see it