What the January 2026 second edition covers
The twenty-one-page guide describes voluntary Corporate Income Tax risk-management/control review, especially for large listed entities and multinationals. CFOs, tax managers and reviewers use the checklist to assess processes; entities can adopt its practices without applying. Participation approval is separate from the later three-year renewable CTRM Status, which requires IRAS to assess controls as adequate/effective and CIT risk as low.
Three control levels and the sixty-percent benchmark
Tax governance establishes Board/senior-management tone and oversight of significant tax matters. Entity-level controls assign capable people, identify/evaluate/manage risks, communicate promptly and periodically review. Reporting controls ensure complete/accurate tax data/treatment, timely returns and enquiry responses. Each key control needs at least sixty percent of its features or accepted equivalent controls; averaging sixty percent across the whole checklist is not the test.
Compensating controls and the twelve-month review period
An alternative control must preserve the intended assurance/rigour when a recommended feature is impractical. The guide’s example combines reviewer/approver for below-threshold transactions where resources prevent full segregation. The review covers either twelve months immediately preceding the participation-approval month or the latest financial year. If financial-year end is more than six months before approval, update any intervening control changes.
All six participation prerequisites
Implement all key controls at three levels over the period, meet the minimum benchmark, have unqualified statutory-audit opinions for the last three years, be outside current IRAS CIT tax-avoidance audits/investigations, have good CIT/withholding/GST/property-tax compliance for three years and no outstanding tax at application, and commit to a reviewer. Proper instalment-plan amounts or the next GIRO deduction are excluded from outstanding tax for this test; good compliance also includes timely answers to queries.
Group participation is not automatic consolidation
A representative can complete a consolidated checklist for several entities. Materially different activities, risks or processes call for separate checklists; entities can instead participate independently. The entity supplies controls/evidence to a reviewer for independent testing. IRAS may inspect documents, interview and visit before awarding status; a completed checklist alone is insufficient.
Arrangement 1: public-accounting or tax-affiliate review
Use an ACRA-registered public-accounting entity or separately constituted Singapore tax affiliate related by ownership/management. The directly involved lead must be SCTP Accredited Tax Advisor (Income Tax), an audit/tax partner or tax director, or team lead reporting to one. Tests follow accepted audit methodology, such as SSA330. Eligibility and conflicts must be checked before accepting appointment.
Three distinct independence safeguards
If the firm prepared/reviewed returns during the same CTRM period, exclude the entire return team; an entirely separate team with an information barrier may review. If it designed/documented new tax processes, likewise exclude that whole team. If it merely documented existing controls, staff who reviewed/approved that documentation cannot perform CTRM review. The footnote’s calendar 2020 example excludes the team preparing the YA 2020 return for financial 2019 during the review period: do not equate review-period overlap solely with underlying income year.
Arrangement 2: independent internal audit
Lead belongs to a professional accounting/auditing body; at least one member is SCTP Accredited Tax Practitioner/Advisor (Income Tax). Report directly to an audit committee of independent non-executive directors, or a specifically tasked independent-review committee reporting there. Global internal audit requires similar professional composition and reports to overseas non-executive audit committee. A qualified internal/external tax adviser can supplement the team only with the specified independence safeguards.
Arrangement 3 and report signatures
Joint internal-audit/public-accounting review follows arrangement 1 if the external firm leads and arrangement 2 if internal audit leads. Findings are signed by external audit partner/tax partner/tax director, internal-audit team lead, or the corresponding leader for the joint arrangement. Team composition can vary, but the leading reviewer’s requirements and authorised signature cannot be omitted.
Milestone 1: readiness and application
Preliminarily assess using checklist/important notes. Submit Participation formAnnex 1 plus Summary of Scores from the checklist Summary worksheet, not the full checklist yet, and choose reviewer arrangement. IRAS aims to inform within fourteen working days of the form or another notified timeline. Once accepted start review; immediately notify changes in application information for eligibility reconsideration.
Milestone 2: all eight evidence categories
Collate checklist, three-level evidence, risk/process flowcharts and mitigations, other governance controls/strategies, controls operating no more than six months, identified gaps and CIT/withholding errors, post-period remedial actions, and other essential reviewer information. The reviewer plans resources/timing/method and tests through interviews, walkthroughs, manuals, evidence inspection and samples, documenting procedures, findings and additional gaps.
Review scope and the three findings documents
Review major transactions/events, key risks and controls, remedial effectiveness, short-operating controls, supporting evidence and error quantification. Provide Findings report, Notes describing work/evidence and further gaps, and Compilation of Control Gaps/CIT/Withholding Errors for Follow-up. These are substantive working results, rather than simply a scored questionnaire.
Milestone 3: remediate and submit within one year
Participant evaluates findings, adds controls, quantifies all affected years’ CIT/withholding errors and updates the compilation. Within one year of participation acceptance submit via myTax Mail the checklist, reviewer Findings plus AppendicesA/B, and CTRM ReportAnnex 4. Extensions need valid reasons/case assessment. Detailed control evidence is retained for request rather than automatically appended.
Milestone 4: IRAS evaluation and its conditions
IRAS can meet participant/reviewer, request evidence or visit. Decision is within six months of documents, subject to issues being fully resolved including controls, quantified errors and additional taxes paid; decision is final. Failure permits reapplication one year after decision. Board escalation can be evidenced through suitable alternatives without routinely providing tax-risk registers/professional advice to IRAS; if alternatives are absent discuss corroboration.
Adequacy and effectiveness beyond the score
IRAS looks for systematic governance risk processes, controls integrated into financial/operating work, effective three-level practices, regular designated-person monitoring and proper documentation. Adequate means relevant to context; effective means mitigating risks and actually followed. Accepted compensating controls can support a key control missing sixty-percent standard features, but their acceptance is assessed rather than assumed.
Penalty waiver: separate one-time CIT and withholding use
Effective CTRM offers one waiver for voluntary disclosure of prior CIT errors and one for withholding errors, with all voluntary-disclosure conditions and no deliberate evasion/serious avoidance. Disclose within three years of effective status; an unused waiver can extend a further three years on renewal, but not beyond. During-review disclosed errors in the report are deemed disclosed at award date; disclose promptly with revised computations, informing IRAS if investigation needs time. Post-award errors use revised computations plus the CTRM disclosure form. Tax itself is not waived.
Audit step-down has a defined scope
IRAS calibrates review to effective controls and discusses up to five existing tax-risk areas/issues for the next three consecutive YAs. New issues from exceptional circumstances are outside the cap, such as new incentives, exceptional large transactions or acquisitions. Transfer pricing, withholding, R&D and capital allowances are cited risk examples. Status is not immunity from audit or every future issue.
All five early-termination triggers
Notify IRAS if the auditor qualifies going-concern ability or gives adverse financial statements, another assurance review qualifies internal-control effectiveness, receivership/liquidation/creditor arrangement/cessation/dormancy occurs, CIT filing/payment/enquiry conditions are breached, or false participation information/wilful evasion/avoidance arises. IRAS may terminate status/benefits before expiry.
Acquisition versus merger and renewal dates
Status is not transferable. Acquiring/being acquired by a non-CTRM entity may preserve the existing entity’s remaining period but does not extend to the other entity. For merger/amalgamation, the new/surviving entity may retain the remainder with written affirmation that controls remain adequate/effective for merger risks, signed CEO/CFO/Chief Corporate Officer. Start renewal six months before expiry, appoint reviewer for twelve months and submit paragraph 8.12 documents at least three months before expiry. The example uses July 2024–June 2025 review for December 2025 expiry.
The annexes are separate downloads
Annex 1 Participation form, Annex 2 Controls Checklist, Annex 3 reviewer Findings with NotesA and error/follow-up CompilationB, and Annex 4 CTRM Report are listed as separately downloadable materials, not reproduced checklists inside this PDF. Use official annex versions alongside this guide. The printed enquiry number is 1800-3568622.
Official source
This article independently explains the substantive contents of the official PDF, including the relevant conditions, procedures and annexes. The linked document remains the authoritative source for its original wording, and later changes should be checked separately.
Read the official PDF ↗