The pandemic has forced many businesses to change to work-at-home mode for extended periods, and some may remain there even as COVID-19 recedes. This shift in operations offers potential advantages, but it’s critical that organizations institute new, or adapt existing, internal controls for remote work to protect their finances and accounting-related data. Here are some of the most important areas to survey.
Conduct a risk assessment
Ideally, you should perform a new risk assessment every time your organization undergoes significant changes in operations. The tumult created by the pandemic and recession certainly qualify.
A comprehensive assessment likely will reveal new risks, as well as different twists on more standard risks related to, for example, fraud or human error. This assessment is a fundamental first step toward mitigating your organization’s vulnerabilities.
READ MORE: Top Five Accounting Tips: Set up Internal Controls
Segregate duties
One employee should never be responsible for collecting, recording, reconciling and depositing cash receipts — those duties should be split up, or segregated, among multiple employees. Different employees should be assigned to approve, record and report transactions. And, if applicable, the employee who handles incoming payments shouldn’t also handle outgoing invoices.
Smaller organizations find segregating duties difficult in “normal” times. But when accounting and finance employees are working remotely and independently, the challenge is compounded. For example, you’ll need to adjust procedures for approving and making payments and for processing receivables.
Make payments safely
If your organizational policy (as opposed to bank policy) requires two signatures on outgoing checks, you might be able to document the second signer’s approval virtually. Your accounting software may include features for building a digital trail of the necessary reviews and approvals. If it doesn’t have such capabilities, other technological tools (for example, Slack, Google Documents or Microsoft Teams) can help.
Alternatively, you could reach out to your vendors and arrange paying via a different method. You may be able to pay online, with automated clearinghouse (ACH) payments or by credit card over the phone. For the longer term, consider adopting an automated software solution.
For incoming cash flow, you can establish similar electronic alternatives for members, customers, or vendors, thereby eliminating the risks associated with the receipt of payments by mail. One option to avoid at all costs? Having payments forwarded to employees’ homes for processing. The opportunity for fraud is too great. In these trying economic times, even the most trusted employee might be tempted to go astray.
Don’t forget reconciliation
You’re no doubt attempting to keep a lot of plates spinning right now, but don’t let vital controls lapse. In the current environment, regular reconciliations are perhaps more important than ever. In fact, they’re one of the most effective methods for detecting discrepancies.
What should you reconcile? First and foremost, an employee who doesn’t have check-signing authority should perform a monthly reconciliation of bank statements. A trusted staffer also should reconcile accounts payable and accounts receivable. Additional reconciliations may be advisable depending on your circumstances, and don’t forget the important step of management review to ensure that all discrepancies are resolved.
Protect your culture
Take care to maintain a culture that prioritizes ethical behavior as well as anti-fraud policies and practices. But, as many organizations have learned over the last year, culture can suffer when employees are scattered.
Proactive measures are essential. As always, the tone at the top matters. Organizational leaders should regularly communicate with staff to reinforce the need for adherence to internal controls for remote work. Don’t rely solely on emails or texts for this messaging — incorporate phone or video conferencing to emphasize the point.
READ MORE: How Effective Are Your Internal Controls?
Tailored plan
Our CPAs can provide specific, tailored recommendations for tweaking or implementing internal controls for remote work to reflect your changed circumstances while maintaining necessary safeguards. We can also help you use the lessons learned during the pandemic — what worked and what didn’t — to safely continue remote working arrangements and prepare for any future crises. Contact us with any questions you might have.
© 2021