Larger companies rely on the segregation of employee duties as the backbone of their control systems.  This is more difficult to do in a smaller business, as there are often fewer employees who perform a broader range of job duties within the business.  Here are a few ideas of controls that can be easy to implement, yet result in stronger deterrents against fraud.

It is not unusual in a smaller business to have one person who is able to record cash transactions and reconcile the checkbook.  Sometimes this person can also either sign checks, or has access to the signature stamp.  Taking away the ability to sign checks, or custodianship of the signature stamp from the person that reconciles the cash accounts is a good first step.

Presenting the check signer with the vendor invoice, purchase order and receiving slip (if applicable) along with every check for the check signer to sign is another good procedure.

An additional control procedure would be to mail the bank statements with checks or check copies to the owner’s home, rather than to the Company’s place of business.  The owner would briefly review the returned checks or check copies prior to turning them over to the person that will reconcile them.  This will improve the chances of detecting someone writing an unauthorized check.  The owner reviewing the bank reconciliations and lists of outstanding and cleared checks and deposits is also a good procedure to implement.

Many accounting software programs, including QuickBooks, allow a user to change the vendor name on a check or delete a transaction after a check is issued.  Using a software program that requires transactions be reversed and not allowing them to be changed or deleted is much better.  Turning on the audit trail function in QuickBooks, while not nearly as strong, can help detect unauthorized changes to transactions if the owner will review the list of changed and deleted transactions each week or month.

More robust construction accounting software programs have stronger controls over user access to sensitive areas or functions.  If your company’s software will control access to vendor maintenance, consider implementing procedures to require all vendor changes and deletions to be signed off by the owner and to be made by a person or persons without any other accounts payable or check writing duties.  If your software isn’t able to do this, consider changing to one with better access controls.

Another good procedure that is not to hard to implement is to export both vendor and employee lists to Excel, and sort both lists by street address.  Compare the street addresses of the two files and investigate any vendor activity where there is a match.

These were a few relatively easy procedures to implement.  A good system of controls protects employees from unwarranted suspicion in the event of fraud.  Employers benefit from the reduction in exposure to fraud.

Special Thanks to John Reed, Principal, LarsonAllen LLP, Fort Myers, Florida for his help in writing this article.