Internal Controls, Cash Management, and Fraud Prevention
An overview of internal control systems, including the COSO framework, core principles, and the reality of fraud. It details methods for controlling cash, managing receipts and payments, and performing bank reconciliations.
In the world of business, cash is the lifeblood of an organization. However, because it is highly liquid and easily portable, it is also one of the most vulnerable assets to theft and mismanagement. To protect these assets, companies implement an internal control system—a framework of policies and procedures designed to protect assets, ensure reliable accounting, uphold company policies, and promote efficient operations.
The Framework of Internal Control
Modern internal control is not just a set of random rules; it is a structured system often guided by the Committee of Sponsoring Organizations (COSO). COSO identifies five essential "ingredients" that ensure the quality of accounting information:
Control Environment: The foundation of the system, encompassing the company's structure, ethics, and integrity.
Risk Assessment: The process of identifying, analyzing, and managing potential risk factors.
Control Activities: The specific policies and procedures implemented to reduce the risk of loss.
Information & Communication: The systems used to report necessary data to both internal and external parties.
Monitoring: The ongoing, regular review of the system to ensure its adequacy.
Regulatory Note: Following major corporate scandals involving companies like Enron and WorldCom, the Sarbanes-Oxley Act (SOX) was passed. This law requires managers and auditors of public companies to document and certify their internal controls. To ensure compliance, the Public Company Accounting Oversight Board (PCAOB) oversees the work of auditors.
The Five Components of the COSO Internal Control Framework outlines key elements for effective organizational control, including Control Environment, Risk Assessment, Control Activities, Information & Communication, and Monitoring, all working together to achieve objectives and ensure reliable reporting, compliance, and operational efficiency.
Core Principles of Internal Control
While specific procedures vary by industry, several fundamental principles are common to all effective internal control systems:
Establish Responsibilities: Tasks should be clearly defined and assigned to a single person so that accountability can be determined if errors occur.
Maintain Adequate Records: Detailed records, such as a chart of accounts and prenumbered forms, help protect assets and allow managers to monitor activities.
Insure Assets and Bond Key Employees: Companies should insure physical assets and "bond" employees who handle significant amounts of cash. Bonding is essentially an insurance policy against theft by that specific employee.
Separate Recordkeeping from Custody of Assets: The person who has physical access to an asset (like a cashier) should not have access to the accounting records for that asset. This forces potential fraudsters to collude with others to commit theft.
Divide Responsibility for Related Transactions: Also known as "separation of duties," this ensures that the work of one person acts as a check on another.
Apply Technological Controls: Tools like cash registers, time clocks, and ID scanners provide electronic trails and limit access to authorized personnel.
Perform Regular and Independent Reviews: Ideally conducted by auditors who are not directly involved in the daily activities, these reviews evaluate the effectiveness of the controls.
The Reality of Fraud and Limitations
No system is perfect. Internal controls face two primary challenges: human error (carelessness, misjudgment, or confusion) and human fraud (intentionally defeating controls for personal gain).
To understand why fraud occurs, accountants often look at the Fraud Triangle, which consists of three elements:
Opportunity: The ability to commit fraud due to weak controls.
Pressure: The motivation (often financial) to commit the act.
Rationalization: The mental justification for the dishonest act.
Furthermore, companies must navigate the cost-benefit constraint: the cost of implementing a specific internal control should not exceed the benefit it provides.
The Fraud Triangle illustrates the three elements that are often present when fraud occurs: pressure, opportunity, and rationalization.
Controlling Cash
Cash is the most liquid asset, meaning it can be used immediately to pay liabilities. Effective cash management involves two goals: planning receipts to meet payments and keeping only the minimum amount of cash necessary to operate.
Cash Receipts and Payments
To protect cash, companies follow three basic guidelines:
Separate handling of cash from recordkeeping.
Make cash payments via check or Electronic Funds Transfer (EFT).
Deposit cash receipts promptly into the bank.
For small, frequent expenditures like shipping fees or minor repairs, companies use a Petty Cash System. A fund is established by debiting Petty Cash and crediting Cash. When the fund is replenished, the specific expenses are debited, and Cash is credited.
Bank Reconciliations
Because the balance on a bank statement rarely matches the company's books exactly, a bank reconciliation must be prepared periodically. This process explains the differences, such as deposits in transit, outstanding checks, or bank fees.
The reconciliation follows this logic:
Adjusted Cash BalanceAdjusted Cash Balance=Bank Balance+Deposits in Transit−Outstanding Checks±Bank Errors=Book Balance+Collections & Interest−Bank Fees/NSF Checks±Book Errors
Exam Tip: Only items that affect the book balance require adjusting journal entries. If the bank made an error, you note it on the reconciliation, but you do not record an entry in your own books.
Keep reading for free.
Create an account to finish this reading and make it part of your study routine.
