Inventory & Warehouse Risk Audit in India: Stock Variance, GRN, Shrinkage, Transfers, Damage, Third-Party Warehouses & Control Analytics 2026
A CFO, operations and audit-committee framework for protecting inventory from shrinkage, unsupported receipts, transfer leakage, write-off abuse, ageing and third-party custody failures.
Inventory loss is often attributed to “operational variance” without determining the root cause. Yet the same variance may reflect receiving error, undocumented transfer, theft, damage, system timing, incorrect unit of measure, vendor short supply, customer return mismatch or manipulated write-off.
A corporate-standard audit links physical stock, ERP records, purchase and dispatch documents, warehouse controls, third-party custody and user activity rather than relying only on a year-end count.
1. Map the inventory lifecycle
Document procurement, inbound gate entry, goods receipt, quality check, binning, picking, transfer, dispatch, returns, damage, scrap, write-off and physical verification. Identify who can create or reverse GRNs, adjust stock, approve write-offs and change item masters.
For logistics businesses, connect the warehouse review with Logistics Risk Mitigation in India.
2. Inbound receipt and GRN controls
Test whether purchase order, gate entry, supplier challan, quantity received, quality status and GRN align. Search for backdated GRNs, receipt entered before physical arrival, repeated manual quantity overrides and GRNs posted by users without custody responsibility.
Where weighing or scanning is used, compare device data with system records and investigate manual fallback frequency.
3. Physical custody and access
Review restricted zones, key/card access, visitor logs, CCTV retention within applicable policy, segregation of high-value stock, sealing practices, shift handovers and control over empty packaging or scrap. Access should reflect role, and leavers or transferred staff should lose warehouse permissions promptly.
4. Cycle counts and physical verification
High-risk SKUs should be counted more frequently than low-value slow-moving items. Surprise counts can test whether records are reliable between scheduled annual counts. Variances should be investigated before adjustment, with cause, evidence, approver and financial impact recorded.
5. Inter-warehouse and branch transfers
Reconcile dispatch quantity, transfer document, vehicle or courier evidence, receiving confirmation and timing. Long-open transfers, repeated shortages in transit and transfers between the same locations deserve trend review.
System ownership should prevent the sending location from unilaterally completing the receiving side without compensating controls.
6. Returns, rejected goods and reverse logistics
Customer and vendor returns can create leakage when returned items are not physically received, are received but not entered, are downgraded without evidence or are resold outside the normal system. Link return authorisation, transport evidence, warehouse receipt, quality grading and financial credit note.
7. Damage, expiry, scrap and write-offs
Review damage photographs or inspection evidence, approval, scrap sale, destruction records, insurer recovery where relevant and whether the same employee controls both classification and disposal. Repeated write-offs for one location, SKU or shift should be analysed.
Material write-offs should also be compared with the Management Override & Fraud-Control Review.
8. Third-party warehouse and 3PL risk
Contracts should define custody, inventory accuracy, insurance, access, audit rights, loss thresholds, claims, data sharing, subcontracting and exit support. Reconcile the company’s inventory ledger to 3PL statements and conduct periodic physical or independent verification for material stock.
Third-party governance should connect to Third-Party Risk Management in India.
9. Inventory analytics
- negative stock or repeated manual adjustments;
- GRN before gate arrival or invoice date anomalies;
- open transfers beyond normal transit time;
- high shrinkage by SKU, branch or shift;
- frequent write-offs just below approval limits;
- slow-moving or obsolete inventory without action;
- returns without corresponding receipt;
- duplicate serial numbers or unusual unit conversions;
- 3PL statement differences; and
- stock adjustments by privileged users after count.
10. Warehouse risk matrix
| Area | High-risk indicator | Control |
|---|---|---|
| Receipt | GRN unsupported by physical evidence | PO/gate/GRN reconciliation |
| Custody | Uncontrolled access or shared credentials | Role-based access and periodic review |
| Movement | Long-open or unmatched transfer | Sender/receiver confirmation and ageing |
| Write-off | Repeated damage/scrap adjustments | Evidence, authority and independent disposal control |
11. Evidence and data required
Item master, stock ledger, purchase orders, gate entries, GRNs, transfer records, dispatch documents, return records, write-offs, scrap records, cycle-count sheets, user-access logs, CCTV/access registers where lawfully maintained, 3PL statements and insurance/claims data form the core evidence set.
12. Board and management deliverables
- inventory variance heat map;
- high-risk SKU/location analysis;
- open transfer ageing;
- GRN exception schedule;
- write-off and scrap review;
- 3PL reconciliation report;
- estimated shrinkage exposure;
- control-owner and recovery matrix; and
- 30/60/90-day remediation plan.
13. 30/60/90-day remediation
0–30 days: reconcile material variances, freeze unexplained adjustments, count high-value SKUs and close long-open transfers.
31–60 days: strengthen GRN and transfer workflows, clean item masters, redesign write-off authority and reconcile 3PL balances.
61–90 days: implement risk-based cycle counting, recurring analytics, independent spot checks and board/CFO variance reporting.
14. Frequently asked questions
Does stock shortage prove theft?
No. Shortage may result from timing, data error, unit conversion, transfer mismatch, damage or misconduct. Reconciliation is required.
Should every SKU be counted equally often?
No. Frequency should reflect value, movement, shrinkage history and operational risk.
Who should approve write-offs?
Authority should reflect value and risk, with segregation between custody, classification and final approval.
Can a 3PL statement replace company verification?
No. Material inventory held by a third party should be periodically reconciled and verified under contractual audit rights.
Authoritative references
Author: Adv. Govind Bali, Fastrack Legal Solutions LLP.