Best Practices to Fix Your Internal Controls

Scrubbed

Scrubbed

Best Practices to Fix Your Internal Controls
As the founder or leader of a private company, you aren’t required by regulations to have formal internal controls in place. But that doesn’t mean your business doesn’t need them!

A proper internal control system is essential to running a viable, profitable business, whether you’re a public or private entity. Internal controls are the policies and procedures that help you manage and mitigate the financial and operational risks that can hinder your goals. Internal controls also ensure your financial data is accurate, reliable, and timely—so you can make informed decisions that optimize opportunities and build value.

So while you aren’t obligated by regulators to have internal controls, if you intend to operate a thriving business then developing, implementing, and monitoring these controls is a must.

Read more: Check out how Scrubbed can help you with Tax Compliance and Advisory Services 

Why Private Companies Need Internal Controls

As a privately held company, you stand to gain a great deal by instituting internal controls—and conversely, you run the risk of losing a lot by not having them. Well-developed internal controls can help your business:

  • Manage and mitigate financial risk as well as operational risk (for instance, failing to meet service level requirements per a customer contract)
  • Ensure the integrity, completeness, and accuracy of the financial statements you use as key decision-making tools
  • Operate more efficiently, in part by avoiding costly, time-consuming errors
  • Improve consistency across the business, especially during times of high turnover
  • Safeguard confidential, sensitive, or proprietary data
  • Reduce your operating costs over the long term
  • Jump-start your leadership team’s control consciousness, which will prove essential as the company grows
  • Comply with other regulations (unrelated to internal controls), such as those imposed by the IRS or other regulatory bodies
 
Internal controls are also vital for satisfying investor requirements—both during the rigorous due diligence phase and ongoing. When potential investors evaluate your business, solid internal controls will give them confidence in your organization and the reliability of your financial statements. Once investors are on board, they’ll want to see evidence that you’re implementing these controls properly and consistently, providing them with the tools they need to monitor your company’s performance.
Also read: Why Internal Controls are a Must for Small Businesses

Best Practices for Private Company Internal Controls


If you’re ready to develop and institute the internal controls that can help you manage and mitigate risk, these 11 best practices can help you get started.

1. Perform a top-down risk assessment.To reduce your risks, you need to identify them first. Sounds simple enough, but many private companies don’t make risk assessment a priority. A top-down risk assessment anchors your understanding of risk from a high-level perspective, enabling you to allocate resources toward designing and implementing controls that focus on what matters most to your business. Since your risks will change over time, it’s best to revisit and update the assessment regularly.

2. Prioritize your risks.Which risks have the greatest potential impact on your business? Those should be your highest priorities when it comes to mitigation. In some cases, you may find that manual processes are creating risks that could be reduced or managed by moving to automated systems.  

3. Choose your internal control framework.There are various frameworks for establishing internal controls, and it’s important to choose one that best represents your operational, financial reporting, and compliance objectives. The COSO (Committee of Sponsoring Toggle #11. Organizations) framework is commonly used since it provides useful guidance on how to establish internal controls throughout an organization.

4. Develop controls to mitigate risksThe best internal controls are a combination of preventive and detective—ensuring you take a proactive approach to heading off problems, while having reliable processes to detect them early. Typical controls might include performing accounts payable reconciliations and fluctuation analyses on payments and accruals or conducting periodic reviews to ensure compliance with contractual requirements related to timeliness, deliverables, and key performance indicators (KPIs).  

5. Separate critical duties.By dividing responsibility for key tasks among multiple staff members, you eliminate the risk that results when one person has full control of a transaction. Typically, this involves separating custodial duties (the keeping of the asset), authorization/approval duties, and recordkeeping duties. It’s best to institute sufficient review layers, with documents reviewed by someone who is more senior than the person who prepared them. And beyond separating duties at the individual level, it’s prudent to do so at the functional level—for example, not allowing the sales department to authorize its own team’s commissions.

6. Tightly control approvals and authorizations.Financial transaction approvals and authorizations are typically high-risk processes, so be sure your controls limit these tasks to employees with the right level of authority. 

7. Secure physical financial assets and data.If you keep cash or check stock on hand, store it securely and limit access to it. It’s equally important that your internal controls safeguard sensitive, proprietary, or confidential data.

8. Improve your recordkeeping.Complete, accurate, timely records are critical to a thriving, profitable business. Robust internal controls can ensure your recordkeeping will enable your management team and investors to monitor the company’s progress with confidence. 

9. Document your controls.Everyone responsible for implementing your internal controls will need to understand exactly how. That’s why you need to develop documentation that’s complete, detailed, clear, and easy to access, understand, and follow. But internal control documentation doesn’t need to be an exhausting exercise; in fact, it’s likely your company is already doing many of the things that constitute good internal controls. You just need to put in writing what you’re doing, in a way that’s clear and repeatable. 

10. Provide thorough training.Everyone on your staff who will use your new internal controls or whose work could be affected by them needs proper training on how to implement or adhere to them consistently and effectively.

11. Establish a controls monitoring system.A good monitoring program ensures your team is adhering to your internal controls and they are working as they should. It’s usually a combination of an internal audit plan and management testing. Besides establishing an ongoing monitoring system, it’s best to work with an experienced finance partner to audit your controls periodically—not only to ensure your team is complying, but to spot issues and identify opportunities to improve and optimize controls.

How Scrubbed Can Help with Your Internal Controls

If you’re ready to institute the internal controls that will enable your private company to manage and mitigate operational and financial risk, Scrubbed is ready to help!
Contact the experts at Scrubbed to learn how we can help your private company develop, implement, and monitor the internal controls you need to grow and thrive!

CONTACT US
How Scrubbed Can Help with Your Internal Controls

Related Content

Blogs

Employee Retention Credit: You May Qualify!

Employee Retention Credit: You May Qualify!

For businesses that have been severely impacted by COVID-19, an employer tax credit was provided under Section 2301 of the Coronavirus Aid, Relief, and Economic Security Act (CARES Act), called the Employee Retention Credit. The purpose of the Employee Retention Credit is to encourage businesses to keep employees on their payroll during these challenging times.For 2020, the Employee Retention Credit is a fully refundable tax credit for employers equal to 50 percent of qualified wages (including allocable qualified health plan expenses) that eligible employers pay their employees. The credit applies to qualified wages paid after March 12, 2020, and before January 1, 2021. The maximum amount of qualified wages considered for each employee is $10,000 for all calendar quarters, with a maximum credit of $5,000.This high-level summary of the qualifications and the process for claiming the credit can help you determine if you qualify.Who is an Eligible Employer?As defined under the CARES Act, an eligible employer is any employer that carried on a trade or business during calendar year 2020 and met either of the following criteria during any calendar quarter in 2020: The operation of the trade or business was fully or partially suspended due to government orders limiting commerce, travel, or group meetings (for commercial, social, religious, or other purposes) due to COVID-19.The employer had a significant decline in gross receipts for the quarter as compared to the comparable quarter in 2019.To qualify as having a significant decline in gross receipts for 2020, the business must demonstrate its gross receipts for the calendar quarter were less than 50 percent of the gross receipts for the same calendar quarter in 2019. The significant decline in gross receipts ends with the calendar quarter that follows the first calendar quarter after which the business’s quarterly gross receipts are greater than 80 percent of the gross receipts for the same calendar quarter in 2019.What are Qualified Wages?Qualified wages generally mean wages as defined in section 3121(a) of the Internal Revenue Code and compensation as defined in section 3231(e) of the Code. Qualified wages also include amounts paid by an eligible employer to provide and maintain a group health plan as provided in the CARES Act, but only to the extent those amounts are excluded from employees’ gross income (per section 106(a) of the Code).How Do I Claim the Credit?For most employers, the total qualified wages and the related health insurance costs for each quarter are reported on Form 941. The credit is taken against your share of Social Security tax, and any excess is refundable.You can also retain the corresponding amount of employment tax deposited in anticipation of the credit and submit a Form 7200 to request an advance on the credit.It’s Already 2021. Can I Still Claim the Credit for 2020?If you’re unable to claim for the credit in the previous periods, you can file a Form 941-X (Adjusted Employer’s QUARTERLY Federal Tax Return or Claim for Refund) to request a refund. Generally, you must file this form within three years from the date you filed your original return or within two years from the date you paid the tax, whichever is later.Is the Credit Still Available for 2021?Yes, it is. The IRS extended the credit to wages paid after December 31, 2020 and before July 1, 2021 and modified the credit calculation. For 2021, the significant decline in gross receipts is based on an 80 percent threshold for each calendar quarter, the qualified wage limit for any calendar quarter is $10,000, and the credit is equal to 70 percent of qualified wages, allowing a maximum credit of $7,000 for each employee for the first and second quarter of the year. These limits continue to apply in the third and fourth calendar quarters in 2021, but with a separate credit limit applying to “recovery startup businesses.”What is a Recovery Startup Business?Section 3134 of the Code adds a third category of employers that are eligible for the Employee Retention Credit for the third and fourth calendar quarters of 2021: recovery startup businesses. The IRS defines a recovery startup business as one that began carrying on any trade or business after February 15, 2020, has average annual gross receipts less than $1 million for the 3-taxable-year period ending with the taxable year that precedes the calendar quarter for which the credit is determined, and is not otherwise an eligible employer (because it doesn’t qualify based on either full or partial suspension of operations or a decline in gross receipts). The Employee Retention Credit for a recovery startup business can’t exceed $50,000 for each of the third and fourth calendar quarters of 2021.How Does the Credit Interact with the PPP Loan?Even if your business received a Paycheck Protection Program (PPP) loan, you may be eligible for the Employee Retention Credit. However, qualified wages used in the credit are excluded from the payroll costs during the covered period that qualify for forgiveness under the PPP.

Read More >
Blogs

Covid-19 State and Local Small Business Relief Program

Covid-19 State and Local Small Business Relief Program

In light of COVID-19, relief efforts to assist businesses and individuals have been initiated by various states, especially for economic relief.FASTalks summarizes the list to help you search for initiatives to provide economic relief in your respective jurisdiction. Please note that the file is updated regularly as we continue to receive news regarding efforts to combat COVID-19 impact.For the matrix, refer to the file below.Download MatrixWE’D LOVE TO HELP.We will continuously update you regarding evolving news surrounding legislative and administrative issuances dedicated to relieve the general public of the effects of COVID-19. Stay tuned with the advisory bulletin. For immediate clarifications, please contact us at [email protected] or discuss it with your Scrubbed professional.DisclaimerThe information contained herein is of a general nature and is not intended to address the circumstances of any particular individual or entity. It is not intended to be relied upon as accounting, tax, corporate finance advisory, real estate accounting solutions, or other professional service. Please refer to your advisors for specific advice. Although we endeavor to provide accurate and timely information, there can be no guarantee that such information is accurate as of the date it is received or that it will continue to be accurate in the future. No one should act upon such information without appropriate professional advice after a thorough examination of the particular situation.

Read More >
Blogs

Accounting For Impact of Coronavirus Disease of 2019

Accounting For Impact of Coronavirus Disease of 2019

Understanding the direct and indirect effect of COVID-19 can prepare the company’s operations, future plans, and key information communicated to stakeholders.The Coronavirus Disease of 2019, or COVID-19, is an evolving concern that has dealt a huge blow in the Global Financial Market and industries in general, disrupting value chains and daily living of the world’s population. Originally declared as a public health emergency on January 30 by the World Health Organization, the phenomenon is now considered as a Pandemic, and full impact remains evolving. As it affects and creates a toll on human activity and quality of living in general, COVID-19 poses great uncertainty to other facets of businesses. Directly, we have seen the effects in the companies’ supply chains as it halts workforce, production of goods and rendering of services, and forces governments to regulate economic activities. Further, we have identified selected indirect effect on the companies’ financial statements that may pose significant effects in the long run.FASTalks is here to affix your senses on things that matter to your stakeholders, and ensure that your accounting teams—the Scrubbed team— cover considerations that stakeholders might ask—because in times of crisis, stability and knowing the impact of uncertainties matter.In a NutshellCOVID-19 poses 2019 financial statement modifications on Going Concern (ASC 205-40) and Subsequent Events (ASC 855)COVID-19 affects Revenue Recognition for Q1’2020 onwards (ASC 606 and 326)COVID-19 presents accounting for unusual expenses for Q1’2020 onwards (ASC 220 and 225)COVID-19 opens uncertainties towards impairment of certain assets (ASC 350 and 360)COVID-19 affects Lease accounting for Q1’2020 onwards (ASC 84COVID-19 required regulatory reforms by providing tax filing reliefs for State (CA) and Federal Tax Returns2019 FINANCIAL STATEMENTS IMPACTConsistent with ASC 855 provisions, companies should evaluate whether events occurring subsequent to the Balance Sheet date (12/31/2019) require disclosure or adjustments in the financial statement.Managements’ action point is to consider the adjustment in the financial statement, via notes, or via adjusting financial amounts.Non-Adjusting Events / Nonrecognized Subsequent Events. For 12/31/2019 filings, financial reporting impacts will be limited to disclosures in the notes to financial statements. Examples include closure of facilities, change in debt arrangements or restructuring, change in business practices (such as movement to online channels), and modifications in covenants.Adjusting Events / Recognized Subsequent Events. Consistent with current practice, if the event is a culmination of an already existing event as of Balance Sheet date, example of which is the US-China trade restriction, then the financial impact of the event constitutes adjustment in the financial statement details as of 12/31/2019.Significantly, for those not yet issuing the financial statements for 12/31/2019, a grave consideration is the factor of the identified uncertainty (COVID-19). Consistent with the provisions of ASC 205 Subtopic 40, a reporting entity’s exposure to coronavirus-affected areas may raise or contribute to other existing facts and circumstances that collectively raise substantial doubt about the entity’s ability to continue as a going concern.Managements’ action point is to reassess the following:Assess whether liquidation accounting is applicable (COVID-19 may have disrupted an entire industry, and lack of revenue-generating activities may affect the viability of the business);Consider whether impact of COVID-19 is material to the company’s ability to continue as a going concern (did it significantly alter the business model of the company?);Consider Managements’ plans to mitigate the adverse conditions or events;Consider effective implementation of managements’ plans and viability of resolving the substantial doubt as to the impact in the company’s operations.Currently, 42% of SEC Issuers have included COVID-19 as incremental business risk and considered the factor in the companies’ abilities to continue as going concern. If positive outcome is expected based on the action points above, then a mere disclosure is required, considering that COVID-19 impacts the operations of the company materially.CONSIDERING REVENUE RECOGNITION CONSTRAINTS OF COVID-19Consistent with ASC 606 provisions, three factors affecting revenue recognition and subsequent collection must be taken into consideration when recognizing revenue for Q1’2020 onwards.Adjustment of Variable Considerations. Variable consideration is estimated at contract inception and needs to be reassessed at each reporting date. But variable consideration can only be recognized to the extent it is probable a significant reversal will not occur when the uncertainty is resolved. ASC 606 describes examples such as volume discounts, rebates, returns, refunds, and royalties, liquidating damages. Consideration is also variable if it is contingent on a future event and its occurrence, such as meeting performance goals or deadlines, or a customer achieving a certain outcome, such as a distributor meeting a target level of gross margin upon resale. Given the disruption in the supply chain, management is enjoined to consider the following: (a) adjust the rates of returns and refunds with some kind of forward-looking factor, as opposed to historically analyzing rates. In this view, retrospective analysis may need to be adjusted; (b) consider the probability of performance goals or deadlines not being met due to adverse effects in the economy.Assessment of Collectability of Contracts at Day 0. Salient provision of ASC 606 is to ensure that contracts must meet the collectability threshold—being probable. US GAAP defined “probable” as “likely to occur,” which is generally considered at 75% to 80% threshold. While it is a standard procedure to assess the bad-debts on occurring sales, it is a great concern as to whether the credit quality of the customers have been impaired at the onset of the sale/rendering of service.We opt to remind Management that revenue can only be recognized when collection of consideration is probable at the perfection of the contract/delivery of goods. This criteria must be met, and Management is encouraged to assess customers who are credit-impaired on Q1’2020, in order to address existence issues of revenues.Impairment of Receivables amidst COVID-19. While incurred losses model generally apply for private companies, it is important to note that ASC 326, guidance on current expected credit loss model (CECL), suggests that a forward-looking adjustment be considered in the computation of impairment of receivables. We encourage management to consider a forward-looking adjustment (e.g. adjustment of rates such as increase in expected impairment rate) related to overall credit deterioration of customers. Historical analysis (net flow rates) and previous credit profiling may not be applicable in the face of the pandemic, and we are encouraged to adjust our models accordingly. ACCOUNTING FOR UNUSUAL EXPENSES RELATED TO COVID-19Unexpected costs are likely to be incurred because of COVID-19. In recognizing these expenses, ASC 220 and ASC 225 provide guidance on what items are considered “unusual” and “infrequent.”“Unusual” events are those with high degree of abnormality that is clearly unrelated, or incidentally related to the ordinary activities of the business in its operating environment. On the other hand, “infrequent” events are those that are not reasonably expected to be incurred again in the future, within the operating environment.The standard also classifies the operating environment to consider the characteristics of the industry, the geographical location and the governmental regulation. For example, an entity handling national disasters, may consider expenses from response for emergencies as part of their normal operations, and would not be classified as “unusual” or “infrequent”.Examples of which are, but not limited to, the following:Planning, preparation, and prevention activities for Management’s response to COVID-19Cancellation of events and delays in the production costsHR Expenses (additional security and staffing)Increase in IT related expenses due to additional access management tools/remote work set-upManagement’s action point is to provide separate consideration in accounting for these expenses.When incurring unusual and infrequent expenses, generally, these expenses are presented as part of the statement of comprehensive income with supporting disclosure. A detailed list of the accounting treatment for these items are summarized below in accordance with ASC 220:Presentation as a separate component of income from continuing operations, (not presented net of tax);Presentation as a separate component of the financial effect of unusual and infrequent events;Disclosure of unusual and infrequent expenses, including nature and circumstance; andRecognition of receivable/gain from insurance policies to the extent that the amount of losses has been recognized in the financial statements (ASC 450)Our consensus with management disclosure and analysis is this: in order not to disrupt the performance measurement of some industries, these expenses should be considered outliers, and there should be a separation in the evaluation and management of key performance indicators (especially in the healthcare industry).PROBABLE IMPAIRMENT OF ASSETSRespective companies’ financial performance and future projections as to the health and wealth of the business may be significantly affected, either on the demand side or the supply side. Factors include:Demand Side. A significant demand for certain industries have become affected negatively, such as airlines, hotel and hospitality, travel, and large-scale event-based industries. Since uncertainty played a significant role, revenue generation and possible cash inflow may be negatively affected. Management needs to adjust revenues conservatively to check value in use.Supply Side. If supply chain is based on geographical locations widely affected by lockdowns or severe inability to mobilize workforce due to the health toll of the disease, and constraints in the supply meant inability to cater to demand, then Management needs to adjust revenues limited only to the expected supply.Other factors. Other factors needing to be considered for triggering events include presence and availability of alternative workforce and other regulatory restrictions.The guidance for goodwill and intangibles requires that an impairment test be performed when a triggering event occurs. In this case, the triggering event is the volatile and negative impact of the event in the Stock Markets—and normal litmus test is to check whether market capitalization falls below carrying value of the assets.If a thorough analysis is conducted, companies should assess whether a triggering event has occurred, and if so, management should follow the applicable guidance. Normally, this includes Step 0—qualitative assessment of factors, then Step 1—quantitative assessment. The company should consider how assumptions in its financial projections may be impacted by decreased demand for its products or services or extended disruptions to its supply chain, manufacturing operations, or global workforce.Other considerations for Asset Impairment include:Similarly, triggering events discussed above relates to tangible assets as well. Idle property and equipment may present factors of impairment through lack of utility.In inventories, write-down of value due to Net Realizable Value (NRV) decline may be expected. Excess inventory for goods without demand must be carefully analyzed. Other excess inventory that will not be realized within the normal operating cycle may be classified as “long-term” assets.Idle production capacity, and depreciation of idle assets in the event of production restriction due to lockdown, may be charged outright to cost of goods sold rather than capitalizing to inventories.For equity instruments, investment in companies situated in hardly-hit areas needed to be assessed as to whether “other than temporary impairment” factors exist.COVID-19’S IMPACT ON LEASE accountingCertain impact of COVID-19 in lease accounting needs to be considered operationally and financially. They are as follows:Impairment. On lessee scale, one or more of the aforementioned economic and financial markets effects may trigger a requirement for the lessee to assess one or more of its asset groups that includes an ROU asset for impairment under ASC 360 (property, plant and equipment). For example, the economic effects of the COVID-19 outbreak may result in a ‘significant adverse change in the business climate that could affect the value of the long-lived asset. Lessors may find that some of their underlying assets held for lease are impaired if lessee demand for those assets significantly decreases or rental rates decline precipitously.Abandonment. A company may commit to abandon an ROU asset if it concludes it can no longer make use of it as a result of the COVID-19 outbreak, and either cannot or will not sublease it. For example, a company that is leasing overflow fulfillment center space may determine that space is no longer needed because sales have, or are expected to, decline significantly.Lessee discount rates. A lessee’s incremental borrowing rate, typically used by lessees as the ‘discount rate for the lease’, may be affected if interest rates significantly change (e.g. due to central bank monetary stimulus) or its borrowing costs otherwise change (e.g. because its credit rating declines).Lessee reassessments. One or more actions a lessee takes in response to the effects of the COVID-19 outbreak may trigger a requirement to reassess the term of, or an option to purchase the underlying asset in, one or more leases.Fair values. Multiple aspects of ASC 842 lease accounting depend on fair value (e.g. of underlying assets and ROU assets). The fair value of an ROU asset affects whether and how much impairment is recognized on an ROU asset. Fair values may be affected by significant economic events such as the COVID-19 outbreak.Collectability. Collectability of lease payments at inception of contract, and subsequent collection thereof is governed by the effects of COVID-19 as discussed in the previous pages (ASC 606 and ASC 326).WE’D LOVE TO EXPAND OUR SERVICES.To ensure that all factors are considered in the pursuit of relevant and fair financial reporting, our outsourced accounting team services like SaaS accounting expertise can be scaled to accommodate your business needs, especially in considering accounting and reporting impact of COVID-19. Our Technical accounting Group supports the accounting services and provides a thorough analysis of factors outside the normal course of business.E-mail us at [email protected] for full consultancy assessment.DisclaimerThe information contained herein is of a general nature and is not intended to address the circumstances of any particular individual or entity. It is not intended to be relied upon as accounting, tax, or other professional service. Please refer to your advisors for specific advice. Although we endeavor to provide accurate and timely information, there can be no guarantee that such information is accurate as of the date it is received or that it will continue to be accurate in the future. No one should act upon such information without appropriate professional advice after a thorough examination of the particular situation.

Read More >

Contact Information

SF Bay Area Headquarter
111 Anza Boulevard, Suite 320, Burlingame, CA 94010, United States

Phone: (800)837-5160
Email: [email protected]

"Scrubbed" is the brand name under which Scrubbed Advisory, LLC and Scrubbed Assurance LLP provide professional services. Scrubbed Advisory, LLC and Scrubbed Assurance LLP practice in an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable law, regulations, and professional standards. Scrubbed Assurance LLP is a licensed independent CPA firm that provides attest services to its clients, and Scrubbed Advisory, LLC provides tax, finance, and support services to its clients. Scrubbed Advisory, LLC is not a licensed CPA firm.

Copyright © Scrubbed. All rights reserved.