Who is responsible for the accounts: the directors or the auditor?
The directors are responsible for keeping records, preparing the financial statements and approving them. The auditor is responsible only for forming and reporting an independent opinion. Hiring an auditor does not move the directors' duties onto the auditor.
Directors' responsibilities
- Keep accounting and other records that explain transactions and allow the accounts to be conveniently audited, and enter transactions within 60 days (section 245).
- Maintain a system of internal control (section 246).
- Prepare financial statements within the deadlines (section 248).
- Ensure they comply with approved accounting standards (section 244).
- Have the Board approve them with a statutory declaration (section 251), and prepare the directors' report (section 252).
- Circulate and lodge them on time (sections 257-259).
- Appoint the auditor (or properly elect exemption) (section 267).
The auditor's responsibilities
- Report to members on the financial statements and records (section 266(1)).
- State whether the statements give a true and fair view and comply with the Act and standards.
- Report on information obtained and records kept.
- Report certain breaches to the Registrar.
What follows
- If the accounts are wrong, directors cannot say the auditor approved them. The auditor's report is an opinion, not a certification.
- If directors fail their duties, the offences in sections 245, 248, 258 and 259 attach to them and officers.
- For audit-exempt companies, the director who signs the exemption certificate states the company is entitled to the exemption (Practice Directive 10/2024, para 19).
Practical advice. Keep outsourced bookkeeping under review. You can delegate tasks but not accountability.
Legal basis
- Companies Act 2016, ss.244-248, 251-252, 257-259, 266-267
- SSM Practice Directive 10/2024, para 19
Sources
- Companies Act 2016, section 245 - Accounts to be kept (annotated text)
- Companies Act 2016, section 248 - Directors shall prepare financial statements (annotated text)
- Companies Act 2016, section 251 - Financial statements to be approved by the Board (annotated text)
- Companies Act 2016, section 266 - Powers and duties of auditors (annotated text)
Applies to 2026 · Last reviewed 29 October 2026
General information for business owners, not legal, tax or professional advice. Rules change, so check the sources or ask a licensed professional before you act.
Related questions
- Does every Sdn Bhd in Malaysia need to be audited?Not every one, but audit is the default. Section 267(1) of the Companies Act 2016 requires a private company to appoint an auditor for each financial year, unless it qualifies for and elects the audit exemption set by SSM's Practice Directive 10/2024.
- What is audit exemption for private companies in Malaysia?Audit exemption lets an eligible private company choose not to appoint an auditor for a financial year. It rests on section 267(2) of the Companies Act 2016 and SSM Practice Directive 10/2024. The company still prepares and lodges unaudited financial statements.
- What are the audit exemption thresholds for a Sdn Bhd in 2026?For financial periods starting 1 January to 31 December 2026 (Phase 2), a private company must meet at least two of three tests: revenue up to RM2,000,000, total assets up to RM2,000,000, and no more than 20 employees. Each test covers the current and past two years.
- How do I check if my Sdn Bhd qualifies for audit exemption?Pass at least two of three tests (revenue, total assets, employees) for the current financial year and the past two, using the limits for the phase your period falls in. Also confirm you are not an excluded company type, such as a subsidiary of a public company.
- Is a dormant company exempt from audit in Malaysia?Yes, if it has been dormant since incorporation or was dormant in both the current and immediately preceding financial year. A company is dormant when it carries on no business and has no accounting transaction, ignoring payments it must legally make.

