Internal Controls in a Remote Environment

Dec 17, 2020 | Business Health, Non-Profit

Occupational fraud continues to challenge nonprofit organizations.  According to the 2020 Report to the Nations by the Association of Certified Fraud Examiners (ACFE), the median loss to the reported nonprofit organizations was $75,000 and the average loss was $639,000.  The 4 most common types of frauds are corruption, billing schemes, expense reimbursements and theft of cash.

What contributed to these frauds?  A failure in internal controls was a critical factor.  Over ¾ were caused by either lack of internal controls, override of internal controls, lack of management review, or poor tone at the top.

Now, with the sudden challenges presented by the current health environment, historical internal control systems are stretched to the limit by both expected and unexpected new events like:

  • Implementation of major new accounting standards
  • New funding sources with vague or confusing requirements
  • Evolving paper to electronic processes at the same time resources are often severely restricted by challenges with
  • Remote versus onsite work
  • Operating with a reduced budget or part-time staff
  • Succession planning and transition issues
  • Increased financial pressures on many workers

Many smaller organizations may have had outdated or unwritten controls even before 2020.

What can you do to overcome these obstacles?  Here are 5 things to consider:

1. Reevaluate risks-

Consider your current written internal control policies and procedures document.  Evaluate each process, being sure to involve individuals currently performing each task.  Discuss what has changed and look for weak spots and new areas of risk.  Brainstorm possible ‘what if’ scenarios, asking “What could go wrong?” and “What are our weaknesses?”  Make sure segregation of duties remains a constant in an evolving process.

2. Leverage technology-

Identify controls that document a review and approval process with hard copy sign-offs. Technology can provide collaboration tools with additional layers of approval that can help ensure that controls are enforced and appropriate segregation of duties is maintained. Adjust the approval process for those controls to capture digital signature approvals or approval via email. Using a review template to document digital reviews/approvals can help ensure the capture of necessary review steps and consistent application.

3. Add detective controls-

Consider embedding a detective control step into each process to identify any errors or fraud after they have occurred. This can help you identify and correct any weak spots as your business adapts to new processes.

4. Consider controls over accounting estimates-

Management estimates related to asset impairment and going concern evaluations may require significant reassessment, revision and enhancements. Estimate assumptions, methodologies and conclusions should be fully evaluated.

5. Update documentation-

Keep a record of any revisions to processes and include a record of when you have made your changes.

2020 will likely leave a lasting impact on the way we do business. Some businesses that were previously reluctant to accept a remote workforce have adapted.  Some employees have embraced working from home and may wish to continue to do so. Taking the time now to ensure that your internal control processes are responsive to a remote work environment will serve your business well beyond the end of the pandemic.

Red flags

  • Bank reconciliations not performed in a timely manner
  • One individual has control over too much of any one process
  • One individual has control over a little bit (or more) of multiple processes
  • Altered paper or electronic documents
  • Inventory shortages
  • Employees living beyond their means
  • Employees skipping vacations
  • Accounts receivable open for long periods of time
  • Donors not receiving receipts for contributions

Article Submitted by Donna H. Buzby, CPA, RMA, CGMA

Subscribe to our Accounting, Tax and Business Insights Newsletter

Email Address:
Name(Required)
Privacy(Required)
This field is for validation purposes and should be left unchanged.
Navigating State Tax Nexus

Navigating State Tax Nexus

Introduction The Supreme Court's landmark decision in South Dakota v. Wayfair, Inc. in 2018 transformed the landscape of sales tax compliance across the United States. Prior to this ruling, businesses were required to collect and remit sales taxes only if they had a...

read more
Congratulations Jennifer Wallace

Congratulations Jennifer Wallace

Congratulations to Jennifer Wallace, who is stepping into the role of President of the Atlantic-Cape May Chapter of the NJCPA.  Jennifer has been involved in the leadership of the chapter for many years, and she looks forward to giving back to the profession, the...

read more
Pleasantville Music Shoppe

Pleasantville Music Shoppe

Pleasantville Music Shoppe is one of the oldest mom and pop music stores in South Jersey. My dad, Gaston Ragno, at 20 years old, purchased the business on a handshake and a promise to pay when he could from his boss who wanted to retire. Over the years there were a...

read more
Good News from Social Security

Good News from Social Security

President Biden signed the Social Security Fairness Act into law in January of 2025.  This law will have the effect of increasing the entitlement to Social Security benefits to as many as 3.2 million people who receive public pensions based on employment when Social...

read more
I’ve Been Scammed

I’ve Been Scammed

With luck, those words will never leave our mouths.  The sad truth, though, is that crooks are getting smarter and it’s really hard to know what nefarious scheme they will come up with next.  If you find yourself a victim, can you claim any kind of tax deduction for...

read more