October 2003

Trust Is Not an Internal Control

By Julie L. Floch and Cheryl R. Olson

We trusted our finance director; how could she steal from our organization?” This is an all too common lament after a nonprofit organization uncovers embezzlement. Fraud studies show that, given a change in personal circumstances, such as need or opportunity, or a change in beliefs and perceptions, a high percentage of people will steal. Given the statistics and the fraud stories, it’s important to understand why internal controls, which decrease a nonprofit’s vulnerability to fraud, are so important. Trust, unfortunately, is not among them.

Strong internal controls require training and careful planning, but the payoff is worthwhile. Segregation of duties is fundamental, and includes ensuring that financial responsibilities are spread over a number of people. For example, individuals that approve invoices should not sign checks. It also includes employee policies, such as mandating regular vacations so that a normal flow of transactions occurs in an employee’s absence. An accounting manual that details the financial division’s responsibilities is an excellent tool that helps minimize the potential chaos caused by staff turnover.

Timely reporting is another effective control. Monthly financial statements should be presented and discussed with management and the board or finance committee. Even if the finance committee and board do not meet each month, they can review financial statements and monthly cash flow projections and be prepared to act on them at the next meeting. These statements are more effective when compared to the prior year and to the budget, with variances explained.

Officer Roles

The executive director is charged with fiduciary oversight of the organization (including the finance department), and should have a basic understanding of financial statements, internal controls, and the budgeting process, as well as awareness of marketplace issues that may affect the organization.

A knowledgeable and competent finance director is another essential part of every organization. This individual should have a degree and professional experience in accounting; experience in the nonprofit industry is preferable. The finance director must also have communication skills for working with staff, board and committee members, vendors, and service providers. The finance director’s responsibilities generally include establishing and maintaining internal controls, financial policies and procedures, budgets, financial statements, projections, and forecasts. Compensation must be competitive; typically this position commands the second- or third-highest salary in an organization.

The finance director’s performance should be evaluated annually by a compensation committee (which in small organizations might be only the executive director), and the salary level reviewed and adjusted when appropriate. Important evaluation criteria include timely and accurate financial reporting to both management and the board; timely preparation for the audit process; accurate filing of tax and informational returns and the resolution of comments received in the auditors’ management letter. The external auditor can assess the finance director in terms of both skills and the ability to work with the audit process.

To monitor priorities and staffing needs, the executive director should understand and monitor the workload of the finance director and finance department. Within budget constraints it is important for the finance area to have enough staff to ensure the appropriate segregation of duties.

The board members have a fiduciary duty to the organization as well, and as such they are a part of the internal control process. Typically, much of this oversight is carried out by the finance committee and its members. Finance committee responsibilities typically include the following:

Committee members should have sufficient financial sophistication to provide this oversight. The organization’s treasurer is usually a member of the finance committee, but for the committee to function most effectively, it should report to the board, not the treasurer. In addition, there should be a path of communication between the finance director and the finance committee that allows the finance director clear access for discussing any issues regarding the executive director’s oversight. In turn, the finance committee chair should be able to obtain information from sources other than the executive director.

The organization should have an audit committee that has oversight of the management of the reporting, control, and audit processes, and responsibility for the organization’s adherence to ethical standards. The audit committee consists of members who are independent of management and can ask the tough questions. It should report directly to the board. This committee should have responsibility for essentially all of the board’s interaction with its auditors, including discussions of the management letter emanating from the audit process.

Ultimately, the board of directors is responsible for the organization’s oversight and management. Without a strong and involved board, the internal control process will be diluted. The board must avoid micromanaging, yet still be involved enough in the organization’s daily operations to be able to spot and resolve small problems before they become large ones.


Julie L. Floch, CPA, is a partner of Eisner LLP in New York and a member of the NYSSCPA’s Not-for-Profit Organizations Committee, Exempt Organizations Committee, Professional Ethics Committee, and Industry Oversight Committee.
Cheryl R. Olson, CPA, is the financial accounting consultant with the Girl Scouts of the U.S.A. and a member of the NYSSCPA’s Not-for-Profit Organizations Committee.


Home | Contact | Subscribe | Advertise | Archives | NYSSCPA | About The CPA Journal

The CPA Journal is broadly recognized as an outstanding, technical-refereed publication aimed at public practitioners, management, educators, and other accounting professionals. It is edited by CPAs for CPAs. Our goal is to provide CPAs and other accounting professionals with the information and news to enable them to be successful accountants, managers, and executives in today's practice environments.

©2006 The CPA Journal. Legal Notices

Visit the new cpajournal.com.