+216 75 239 330·contact@qfi.tn·Mon — Fri · 09:00 — 18:00
Member of the Tunisian Order of Chartered Accountants
Payroll & HR · February 1, 2026

Social audit: why run it before the legal audit.

Three cases where a social audit prevented a substantial CNSS reassessment. Method, scope and recommended timing.

Cabinet d'Expertise Raafat Ben Ahmed · OECT 1278/B · Gabès

The social audit, still too often perceived as a secondary compliance exercise, proves in practice a decisive prerequisite to the legal audit. It secures the annual accounts, prevents the risk of CNSS reassessment, and structures the HR function.

Scope of the social audit. The exercise covers four dimensions: formal compliance (registers, contracts, filings), material compliance (payslip calculations, application of the collective agreement), accounting consistency (social charges, paid-leave provisions, end-of-career indemnities), and strategic consistency (salary policy, payroll mass, productivity).

Three observed cases. Case #1: an industrial company had omitted to declare to CNSS the benefits in kind allocated to its management. The potential reassessment over three fiscal years exceeded TND 180,000. The social audit allowed spontaneous regularisation, dividing the penalty by four. Case #2: a services company had classified ten providers as subcontractors when reclassification as employees was highly likely. The audit allowed structuring an amicable termination before year-end. Case #3: a family group noted gaps on retirement-indemnity provisions in the consolidated accounts. The audit led to a quantified retreatment, accepted by the statutory auditor.

Recommended timing. Ideally, the social audit is conducted 60 to 90 days before fiscal year-end — i.e. October/November for a calendar fiscal year. This timing allows regularising any anomalies in the last payslip and last CNSS filing of the year.

Our method. The firm offers a dedicated social-audit engagement in a short format (10 to 15 person-days depending on size). The report, structured in quantified and prioritised risks, is shared with management and with the statutory auditor when they wish — in strict compliance with independence rules.

Cabinet d'Expertise Raafat Ben Ahmed