
Internal controls are like highway truck weigh stations, which make sure that
a truck’s load doesn’t exceed the limits and that the truck has a valid plate.
You’re just checking that your staff is playing by the rules. For example, to
prevent or minimize shoplifting, most retailers now have video surveillance,
as well as tags that set off the alarms if the customer leaves the store with the
tag still on the product. Likewise, a business should implement certain proce-
dures and forms to prevent (as much as possible) theft, embezzlement, kick-
backs, fraud, and simple mistakes by its own employees and managers.
The Sarbanes-Oxley Act of 2002 applies to public companies that are subject
to the Securities and Exchange Commission (SEC) jurisdiction. Congress
passed this law mainly in response to Enron and other massive financial
64
Part I: Opening the Books on Accounting
Internal controls against mistakes and theft
Accounting is characterized by a lot of paper-
work — forms and procedures are plentiful.
Most business managers and employees have
their enthusiasm under control when it comes
to the paperwork and procedures that the
accounting department requires. One reason
for this attitude, in my experience, is that non-
accountants fail to appreciate the need for
accounting controls.
These internal controls are designed to mini-
mize errors in bookkeeping, which has to
process a great deal of detailed information and
data. Equally important, controls are necessary
to deter employee fraud, embezzlement, and
theft, as well as fraud and dishonest behavior
against the business from the outside. Every
business is a target for fraud and theft, such as
customers who shoplift; suppliers who deliber-
ately ship less than the quantities invoiced to a
business and hope that the business won’t
notice the difference (called
short-counts
); and
even dishonest managers themselves, who may
pad expense accounts or take kickbacks from
suppliers or customers.
For these reasons a business should take steps to
avoid being an easy target for dishonest behavior
by its employees, customers, and suppliers. Every
business should institute and enforce certain
control measures, many of which are integrated
into the accounting process. Following are five
common examples of internal control procedures:
Requiring a second signature on cash dis-
bursements over a certain dollar amount
Matching up receiving reports based on
actual counts and inspections of incoming
shipments with purchase orders before cut-
ting checks for payment to suppliers
Requiring both a sales manager’s and
another high-level manager’s approval for
write-offs
of customers’ overdue receivable
balances (that is, closing the accounts on
the assumption that they won’t be col-
lected), including a checklist of collection
efforts that were undertaken
Having auditors or employees who do not
work in the warehouse take surprise counts
of products stored in the company’s ware-
house and compare the counts with inven-
tory records
Requiring mandatory vacations by every
employee, including bookkeepers and
accountants, during which time someone
else does that person’s job (because a
second person may notice irregularities or
deviations from company policies)
07_246009 ch03.qxp 4/16/08 11:54 PM Page 64