ABC Pharmaceuticals Ltd., a listed company, is under forensic investigation following the resignation of its statutory auditors. The auditors cited concerns over financial irregularities. An internal audit revealed the f

CS Professional · Internal and Forensic Audit · PYQS · December 2025
ABC Pharmaceuticals Ltd., a listed company, is under forensic investigation following the resignation of its statutory auditors. The auditors cited concerns over financial irregularities. An internal audit revealed the following: Multiple vendor payments just under the ₹ 10 lakh approval threshold. Repetitive vendor invoice amounts ending in specific digits. Round-number expense reimbursements from a group of employees. Suspicious fund transfers through group companies to offshore accounts and back to related parties (possible layering). Email evidence of backdated invoices and manipulated purchase orders. As a forensic auditor, answer the following questions: How would you preserve and analyze email evidence ? What role does email data play in proving manipulation?

Answer & Explanation:

Email Forensics & Metadata Use Steps to Preserve & Analyze Emails: Use write-blockers and forensic tools (like EnCase or FTK) to extract emails without altering data. Maintain chain of custody records. Search for keywords like 'backdate,' 'approve,' 'urgent,' 'PO,' 'invoice.' Role of Metadata: Timestamps: Actual time of creation, editing, sending. Sender/Receiver Info: IP addresses, CCs, BCCs. Message ID: Helps track message threads and authenticity. Detect if documents were backdated or tampered with post-creation.

Topics: Forensic Audit Evidence

Open in Interactive Practice Hub · Full Practice Hub · Chapter Weightage · More in this subject

Related Questions in this Topic