GSTN software developed by Infosys to be audited by third party: Official

GST Network has decided to go in for third-party audit of its software developed by Infosys to ensure that all changes in law are adequately captured and its performance is not lagging on any count, a senior official said.

GSTN operates the IT backbone for the collection of Goods and Services Tax (GST) data of over 11.1 million registered business entities. A third-party audit will ensure that data filed with GSTN is adequately secured and there are no glitches.

GST Network Chief Executive Prakash Kumar said the third-party audit is a standard practice which is followed by banking and financial institutions.

“Whenever the law is changed or any circular is issued, we have to change the software. We need to have a third party to audit whatever software changes have been made by Infosys. So this is a third-party expert audit,” Kumar told PTI in an interview.

He said currently the GSTN team audits the software changes which are brought about after any change in the law.

“But we want a third-party auditor to certify that whatever changes have been brought about in the law, similarly the software has been changed, not more, not less,” Kumar said.

Last year, the Standardisation Testing and Quality Certification (STQC) Directorate, which is under the Department of Electronics and Information Technology, had audited GSTN to check the security of the system.

The audit also encompassed other aspects like mechanism to enhance the resilience of the critical and sensitive GST IT network.

“Entire product which has been developed by Infosys it has been audited once by STQC. STQC will not audit every time. But, for all the changes that have been made I need a third-party to certify.

“This will be a continuous audit of what changes have been made, as per ISO requirement. Not only functional audit but also performance audit. These would be technological auditors,” Kumar said.

Since the rollout of the GST from July 1, 2017, GSTN has handled 115 million returns and processed 3.76 billion invoices.

Currently, over 11.1 million businesses are registered under the GST regime, of which 6.376 million have migrated from the erstwhile service tax and VAT regime, and 4.772 million are new registrants. As many as 1.761 million businesses have opted for composition scheme under GST.