Most organizations believe that constituting an Internal Committee (IC), conducting annual awareness sessions, and filing the Annual Report completes their PoSH compliance journey.
But does it?
In our experience, many organizations that consider themselves compliant often discover deviations when their compliance framework is reviewed in detail. Common gaps include outdated IC orders, expired External Member appointments, missing annual reports, incomplete training records, or lack of documented evidence of awareness programmes.
These are not always major violations, but they can become significant concerns when an organization is required to demonstrate compliance during a complaint, due diligence review, regulatory scrutiny, or legal proceedings.
This is precisely why organizations need to move from “checking boxes” to demonstrating ongoing compliance and governance.
Why the Recent NCW Advisory Matters
The recent National Commission for Women (NCW) Advisory dated 12 June 2026 has brought renewed attention to PoSH governance across organizations.
The NCW Advisory – NCW_POSH_AUDIT_
The advisory recommends annual PoSH audits and highlights several critical areas that employers should periodically review, including:
- Proper constitution and functioning of the Internal Committee
- Timely inquiry and disposal of complaints
- Confidentiality safeguards
- Awareness and training programmes
- Mandatory workplace disclosures
- Workplace safety measures
- Annual reporting compliance
- SHe-Box registration and updates
While the advisory does not amend the PoSH Act, 2013 or make annual audits a statutory requirement, it clearly reflects an increasing regulatory expectation that organizations should be able to demonstrate that their PoSH mechanisms are functioning effectively—not merely that they exist.
For organizations, this is an important signal: PoSH compliance is gradually evolving from a documentation exercise to a governance responsibility.
Compliance vs. Audit Readiness
Most organizations focus on meeting compliance requirements—having a PoSH Policy, constituting an Internal Committee, conducting awareness sessions, and submitting the Annual Report.
Audit readiness goes a step further.
It asks whether these compliance measures are current, legally compliant, well-documented, and capable of withstanding scrutiny if reviewed by regulators, courts, or during a complaint.
In simple terms:
Compliance is about doing what is required. Audit readiness is about being able to demonstrate that it has been done correctly and consistently.
Start with the SHe-Box Compliance Checklist
Before considering a full PoSH Audit, organizations can begin with a structured SHe-Box Compliance Checklist.
A checklist serves as a practical compliance health check and helps assess whether the organization has:
✔ Properly constituted Internal Committee
✔ Updated IC Constitution Order
✔ Valid External Member appointment
✔ Employee awareness programme records
✔ IC capacity building and refresher training records
✔ Annual Report submission records
✔ Updated PoSH Policy
✔ Mandatory display notices
✔ Complaint handling procedures
✔ Confidentiality safeguards
✔ SHe-Box registration and update records
✔ Documentation ready for inspection or review
This simple exercise often helps organizations identify gaps that may otherwise remain unnoticed.
Why Conduct a PoSH Audit?
A PoSH Audit is much more than reviewing documents.
It provides an independent assessment of whether the organization’s PoSH framework is legally compliant, operationally effective, and practically defensible.
Legal Readiness
Helps ensure compliance with statutory obligations and prepares the organization for evolving regulatory expectations.
Risk Reduction
Identifies gaps before they result in legal, financial, or reputational consequences.
Better Governance
Demonstrates that leadership is actively monitoring workplace safety and ethical practices.
Stronger Internal Committee
Highlights areas where committee members may require additional training, procedural guidance, or documentation support.
Employee Confidence
Employees are more likely to trust a system that is transparent, well-maintained, and periodically reviewed.
Is a PoSH Audit Mandatory?
As of today, the PoSH Act, 2013 does not expressly mandate an annual PoSH Audit.
However, the recent NCW advisory recommends annual audits and indicates a growing regulatory focus on proactive compliance and institutional accountability.
Organizations that voluntarily conduct periodic audits today are likely to be better prepared for future regulatory expectations and better positioned to demonstrate compliance whenever required.
In that sense, a PoSH Audit should be viewed not merely as a compliance activity, but as a best practice for responsible workplace governance.
How CecureUs Can Help
At CecureUs, we help organizations move beyond basic compliance by conducting comprehensive PoSH audits that include:
- Internal Committee constitution review
- Policy review
- Documentation audit
- Annual Report review
- SHe-Box compliance review
- IC capability assessment
- Compliance gap analysis
- Action plan with practical recommendations
Our approach is not limited to identifying gaps; it is designed to help organizations build a stronger, more effective, and audit-ready PoSH framework.
For more blogs and articles, visit our official website. Contact us for workshops and queries related to POSH, EAP (Employee Assistance Program) , Diversity and Inclusion and Code Of Conduct.
