Stop Fraud Before It Starts: Essential Internal Controls for Small Businesses

Date: August 21, 2025

Time: 11:00AM-12:00PM MST

Location: Online Webinar

Presenter: Steven D Hovland, CPA, Certified Forensic Accountant

From fake invoices to unauthorized payments, small businesses lose billions each year to fraud, often due to gaps in internal controls. But you have the power to protect your revenue and reputation!
 
Join Steven D Hovland, Certified Forensic Accountant and Virtual CFO at DelegateCFO, for a free, actionable webinar designed exclusively for small business owners and finance leaders.

What You’ll Learn:

Who Should Attend:

Why Attend?

“Most small business fraud can be prevented with a few smart controls. Let me show you how.”

By the end of this session, you’ll have practical strategies to immediately strengthen your business’s financial defenses and reduce your risk, without the need to hire additional staff.

About Your Presenter

Steven D. Hovland, CPA Certified Forensic Accountant
Steven is a seasoned Certified Public Accountant and Virtual CFO, committed to helping businesses unlock their full financial potential. With over 25 years in financial leadership and consulting, he has helped owners in dozens of industries sharpen their margins and maximize profits.
Fractional CFO Services

Free Bonus!

All attendees get our Internal Controls Self-Assessment Checklist—free!
 
Plus: Complimentary 1:1 consult for webinar participants.
Who should attend?

This webinar is perfect for business owners, finance managers, and anyone who wants a clearer understanding of company profitability.

Is it free?

Yes, there is no cost to attend.

Will I get a recording?

Everyone who registers will receive a link to watch the replay.

1
00:00:03.780 –> 00:00:04.780
Delegate CFO: Hello, everyone.

2
00:00:05.210 –> 00:00:08.200
Delegate CFO: Welcome to today’s webinar about internal controls.

3
00:00:08.380 –> 00:00:20.880
Delegate CFO: Now, this particular webinar is near and dear to my heart, because as many of you know, not only am I the owner of Delegate CFO, I also own another company, HublinForensic.com.

4
00:00:21.040 –> 00:00:29.429
Delegate CFO: And on that side of my companies, that’s where I do my forensic investigations. I investigate fraud, embezzlement, so on and so forth.

5
00:00:29.800 –> 00:00:40.150
Delegate CFO: And unfortunately, in that particular company, I’ve seen a lot of small businesses lose quite a bit of money, and mainly it was because of

6
00:00:40.320 –> 00:00:44.840
Delegate CFO: either lack of internal controls or not understanding internal controls. So…

7
00:00:45.090 –> 00:00:48.359
Delegate CFO: The best forecast budget you could possibly have

8
00:00:48.730 –> 00:01:06.920
Delegate CFO: won’t amount to anything if somebody’s stealing from you. So that’s why I felt it was important to go ahead and do this particular webinar, to go over what intercontrols are, what’s the importance of them, how much… what’s the cost of not doing them, and then what you can do as a small business owner to have those in place. And again.

9
00:01:07.140 –> 00:01:19.900
Delegate CFO: Turn controls are crucial for your small business, because all the work you do could instantly evaporate from somebody just stealing from you. So, let’s go ahead and jump into the respective

10
00:01:19.900 –> 00:01:27.269
Delegate CFO: Webinar. So again, we’re going to talk about stopping fraud before it starts, and the essentials of these particular internal controls.

11
00:01:28.560 –> 00:01:34.140
Delegate CFO: Again, my name’s Steve Holland, I’m a CPA, as well as a certified forensic accountant.

12
00:01:34.300 –> 00:01:46.780
Delegate CFO: I’ve been a CPA since November of 2000, and I’ve been doing fraud investigations for almost 15 years now, and I’ve testified both in civil cases and criminal cases.

13
00:01:47.220 –> 00:01:50.170
Delegate CFO: And so, today, we’re going to cover

14
00:01:50.410 –> 00:01:59.189
Delegate CFO: What are internal controls, why do they matter, and what’s the impact that, say, poor internal controls can have on your particular company?

15
00:01:59.670 –> 00:02:00.740
Delegate CFO: First off.

16
00:02:00.840 –> 00:02:11.140
Delegate CFO: I wanted to kind of give you some statistics from the Association of Certified Fraud Examiners. So, why do internal controls matter? Well.

17
00:02:11.760 –> 00:02:31.689
Delegate CFO: If you want to know what the effect of fraud… what the effect of fraud has on companies, Google Report to the Nations. Now, that’s a report that’s done every other year, so every two years. The ACFE puts out this report. It’s a very detailed report, you know, it’s got very nice graphics.

18
00:02:31.810 –> 00:02:39.479
Delegate CFO: And it goes through every single fraud that you could possibly have, whether it’s misappropriation of assets, which is more or less

19
00:02:39.560 –> 00:02:49.500
Delegate CFO: theft of cash, to inventory theft, to financial statement fraud. It breaks all that down. And then it breaks it down by respective regions, companies.

20
00:02:49.550 –> 00:03:03.840
Delegate CFO: male, female, so it breaks all that information down. It’s very, very helpful, and it’s very insightful when you go through and review that. But some of the statistics that are really applicable to our presentation today are here on the screen.

21
00:03:04.660 –> 00:03:11.700
Delegate CFO: From their report, 51% of fraud in small businesses is due to lack of internal controls or override of controls.

22
00:03:11.990 –> 00:03:21.149
Delegate CFO: And a lot of times, the override of controls, you can just think of as lack of controls, because if somebody’s ever able to override the controls, they’re really not in place to begin with.

23
00:03:21.260 –> 00:03:25.950
Delegate CFO: So think about that. Over half of fraud happens because there’s no controls in place.

24
00:03:26.520 –> 00:03:28.140
Delegate CFO: Small boot businesses

25
00:03:28.290 –> 00:03:37.409
Delegate CFO: lose, on average, 5% of annual revenue. Now, that is a huge number, and I’ll explain why. We’ll walk through that particular 5% here in a second.

26
00:03:37.600 –> 00:03:42.330
Delegate CFO: But that’s, on average, 5% of annual revenue to fraud.

27
00:03:42.530 –> 00:04:02.209
Delegate CFO: Median loss, 120. Typical fraud lasts about 12 months before detection. Again, depending on that particular statistics, it depends on how long the employee’s been with the company. Long-term employees, their fraud tends to go a lot longer before they’re detected, but on average, it’s about 12 months before detection.

28
00:04:02.650 –> 00:04:09.210
Delegate CFO: And turbo controls are not just for big companies. They are for small businesses, as well. So…

29
00:04:09.400 –> 00:04:14.480
Delegate CFO: Let’s go take a closer look at that 5% of annual revenue.

30
00:04:14.870 –> 00:04:17.640
Delegate CFO: So right here on your screen, …

31
00:04:18.190 –> 00:04:27.480
Delegate CFO: I took this from just a news article in Google, so if you have time, I suggest you go into Google, you type in bookkeeper fraud, hit enter.

32
00:04:27.620 –> 00:04:30.929
Delegate CFO: And there’ll be a whole bunch of stories, and there’ll be quite a few stories.

33
00:04:31.890 –> 00:04:51.719
Delegate CFO: Month later, two months later, do the same thing. There’s going to be a whole bunch of news stories. So, this fraud happens, it happens quite a bit. So, I just went in, typed in bookkeeper fraud, found this particular article, and this is actually a snippet from that article, and I’ll read it verbatim for you, because it’ll have importance to what we’re going to discuss.

34
00:04:52.240 –> 00:05:08.069
Delegate CFO: Said Janelle Klein, prosecutor for the Conference of District Attorneys, which represented the state in the case. Some of the owners were using their own money to keep the business afloat and folks employed, believing the company wasn’t profitable, when all the while the problem was Ramos embezzling the funds.

35
00:05:08.450 –> 00:05:12.680
Delegate CFO: Now, keep that in mind. We’ll come back to that screen, but let’s keep that in mind, so…

36
00:05:12.820 –> 00:05:17.620
Delegate CFO: Again, on average, 5% of annual revenue is…

37
00:05:17.750 –> 00:05:25.829
Delegate CFO: taken due to fraud. So let’s do a real quick mathematical calculation so you kind of get an idea as to what this is.

38
00:05:26.060 –> 00:05:37.850
Delegate CFO: So, on your screen, I just have a very generic company. Said they have a million dollars in revenue, $600,000 in cost of goods sold, $350,000 in operating expense, net income, $50,000.

39
00:05:38.330 –> 00:05:48.020
Delegate CFO: You’ll notice that net income, the $50,000, represents 5% of revenue. So, in other words, that 5% of revenue is $50,000,

40
00:05:48.480 –> 00:05:51.069
Delegate CFO: But it also happens to equal the net income.

41
00:05:51.420 –> 00:06:00.089
Delegate CFO: So, most companies, especially small businesses, your net margin, which is your net income divided by revenue.

42
00:06:00.520 –> 00:06:10.689
Delegate CFO: it hovers around, say, 5% to 15%. You know, obviously, depending on your industry, you could have a larger percentage, but it’s really the percent of net income

43
00:06:10.890 –> 00:06:13.240
Delegate CFO: Divided into sales is your net margin.

44
00:06:13.500 –> 00:06:15.710
Delegate CFO: And in this particular situation.

45
00:06:15.830 –> 00:06:22.039
Delegate CFO: It’s equal to 5%, the net income of $50,000. Well, that’s 5% revenue right there.

46
00:06:22.300 –> 00:06:25.910
Delegate CFO: And the more important thing to consider is

47
00:06:26.490 –> 00:06:35.399
Delegate CFO: When an employee steals from you, even though that previous slide… previously slide said that it was 5% of revenue.

48
00:06:36.080 –> 00:06:38.919
Delegate CFO: A lot of times, they’re stealing your net income.

49
00:06:39.280 –> 00:06:58.619
Delegate CFO: Because, at the end of the day, you still have to pay for your cost of goods sold, so you have to pay for your inventory, you still have to pay your operating expenses, so you got your rents, you know, interest on your note, etc. You still, as an owner, have to pay that. So when they’re stealing 5% of your revenue, they’re really stealing your net income.

50
00:06:58.750 –> 00:07:04.150
Delegate CFO: On there. And another way to think about this is…

51
00:07:04.420 –> 00:07:10.470
Delegate CFO: when somebody steals from you, again, they’re more or less stealing from your net income. We’ve established that part.

52
00:07:10.860 –> 00:07:18.489
Delegate CFO: For you to recover those funds that they stolen, you have to have the amount of embezzlement.

53
00:07:18.570 –> 00:07:35.819
Delegate CFO: divided by the net profit margin. In this case, $50,000 divided by 5%, it’s going to be a million. So just to recover the amounts that they stole, you’re going to have to recover, or have additional sales on top of everything else of a million dollars. So let’s go back to our previously slide.

54
00:07:36.390 –> 00:07:47.549
Delegate CFO: again, I won’t read the whole thing, but where she said, some of the owners were using their own money to keep their business afloat, believing the company wasn’t profitable, when all the while the problem was Ramos embezzling the funds.

55
00:07:48.020 –> 00:07:51.629
Delegate CFO: Again, that 5% of sales.

56
00:07:52.100 –> 00:07:57.470
Delegate CFO: In this particular situation, this Ramos lady, she was stealing from the net income.

57
00:07:57.730 –> 00:08:00.949
Delegate CFO: And I’ve seen this several times.

58
00:08:01.050 –> 00:08:04.719
Delegate CFO: Where owners of a company, where they had embezzlement.

59
00:08:04.900 –> 00:08:14.689
Delegate CFO: they had to fund the company. They had to do a capital call, or had to take out a line of credit. And so, a lot of times, they don’t know that they’re being stolen from.

60
00:08:14.750 –> 00:08:25.740
Delegate CFO: And again, like in this situation, this is not uncommon, where the company thought they weren’t profitable. In reality, it was just that lady was stealing the funds. And again, when you see that number, 5% of revenue.

61
00:08:25.900 –> 00:08:27.979
Delegate CFO: You need to think of it more of.

62
00:08:28.160 –> 00:08:39.880
Delegate CFO: that’s all the net… they’re stealing from your net income. And however much they stole, I then need to take my profit margin and divide that into that respective number. And so, going back.

63
00:08:41.470 –> 00:08:56.140
Delegate CFO: To calculate, again, just to reiterate, to calculate the amount of revenue needed to recover stolen funds, you need to take the total funds embezzled and divide by your net profit margin. And again, embezzle funds, divide by net profit margin. Key point here.

64
00:08:56.410 –> 00:08:59.960
Delegate CFO: If your net profit margin is lower.

65
00:09:00.100 –> 00:09:02.869
Delegate CFO: Then, say, standards say it’s 2%.

66
00:09:03.310 –> 00:09:18.700
Delegate CFO: then you’re gonna need to generate much more sales to make up for that cash investment. So, conversely, obviously, if you have a very high net margin percentage, then you won’t have to bring in as much sales, but you’ll still have to bring in that. And

67
00:09:18.930 –> 00:09:28.510
Delegate CFO: when I’m saying bring in more sales, this is above and beyond what you’re already budgeted. So in this, you know, in our previous slide, we look at that, you know, if…

68
00:09:29.050 –> 00:09:38.910
Delegate CFO: This lady stole, or this person stole $50,000, and that’s their net margins, 5%, so obviously they need to generate a million dollars just to make up that revenue.

69
00:09:39.020 –> 00:09:43.449
Delegate CFO: Let’s say they already budgeted for the year for 2024 $1.5 million.

70
00:09:43.680 –> 00:09:49.269
Delegate CFO: So that means for them to get back to where they originally wanted to be at the end of 2024,

71
00:09:49.870 –> 00:09:58.470
Delegate CFO: They have to have $2.5 million in sales, and that’s just to get to the cash basis that they were projecting to have.

72
00:09:58.620 –> 00:10:14.920
Delegate CFO: Because keep in mind, when you do your budgets and your cash flow, you’re budgeting actual cash coming in to more or less pay for the company, pay for expenses, etc. Again, goes back to this slide. Company wasn’t believing they were profitable, because she’s stealing from the bottom line, so…

73
00:10:14.950 –> 00:10:20.970
Delegate CFO: That is a key point to understand, is when you see something like statistics of 5% revenue.

74
00:10:21.570 –> 00:10:26.509
Delegate CFO: That lady or those people are stealing from your respective bottom line.

75
00:10:26.650 –> 00:10:29.800
Delegate CFO: So… fraud. Now.

76
00:10:30.000 –> 00:10:37.970
Delegate CFO: You’ll hear the term fraud triangle, so if you go into Google or type in fraud triangle, you’ll actually see all sorts of images of, literally, triangle.

77
00:10:38.510 –> 00:10:49.470
Delegate CFO: And what the premise of the fraud triangle is, is you need all three sides of the triangle to have fraud happen. A lot of times when you see the picture, you’ll see the…

78
00:10:49.610 –> 00:10:52.390
Delegate CFO: The pyramid, and then you’ll see fraud stuck in the middle.

79
00:10:52.780 –> 00:10:58.289
Delegate CFO: A better way to think about it is, instead of a triangle, think of it as a three-legged stool.

80
00:10:58.410 –> 00:11:06.839
Delegate CFO: So, in order to get, you know, and if we say the seat itself is actual fraud. So, in other words, the half fraud happen, we need those three legs.

81
00:11:07.020 –> 00:11:21.480
Delegate CFO: And the three legs of a fraud triangle, or three-legged stool, are motivation pressure, rationalization, and perceived opportunity. Now, you’ll hear different descriptions of it, but these are really the three key areas.

82
00:11:22.120 –> 00:11:23.490
Delegate CFO: Motivation and pressure

83
00:11:23.650 –> 00:11:41.450
Delegate CFO: That is usually when somebody feels like, you know, they have a lot of medical bills, so they need to get those covered, or, you know, they want to stay at the country club with all their friends, but it’s very expensive, but they don’t, you know, they don’t want to be on the outs with all their friends there at the country club.

84
00:11:41.470 –> 00:11:48.669
Delegate CFO: Or, you know, all our friends are going to Vegas, you know, once a quarter, and so they feel like they want to go to that.

85
00:11:48.720 –> 00:11:56.550
Delegate CFO: There’s usually some sort of motivation or pressure behind somebody who commits fraud. You know, there’s something there that’s causing them to want to do that.

86
00:11:57.070 –> 00:11:58.540
Delegate CFO: Rationalization.

87
00:11:58.820 –> 00:12:01.750
Delegate CFO: Rationalization is predominantly

88
00:12:02.000 –> 00:12:18.059
Delegate CFO: if I’m an employee, and I feel like I worked a ton for the company, but they didn’t give me a bonus. Well, I may rationalize, I deserve a bonus because I work harder than so-and-so, or I deserve a pay raise because I’m actually doing two jobs, you know, when so-and-so left.

89
00:12:18.120 –> 00:12:26.469
Delegate CFO: So, rationalization is how somebody rationalizes they should commit fraud because of XYZ instance.

90
00:12:27.170 –> 00:12:36.009
Delegate CFO: And the last item, perceived opportunity. Now, perceived opportunity is where this, is where you have internal controls.

91
00:12:36.320 –> 00:12:54.530
Delegate CFO: If I’m a scrupulous person, and then I’m trying to steal, and I know that the owner never looks at the bank statements, never looks at the income statement, just occasionally shows up, you know, writes himself a check for disbursement, he’s not really there, nobody really looks over that.

92
00:12:54.980 –> 00:13:02.109
Delegate CFO: in my mind, if I’m committing fraud, I see there’s an opportunity here, because nobody’s going to catch me. Nobody’s looking at my work or anything like that.

93
00:13:02.270 –> 00:13:10.510
Delegate CFO: And so that’s really where the internal controls are. So, back to the three-legged stool. You need all three of these items to have fraud happen.

94
00:13:10.660 –> 00:13:14.260
Delegate CFO: Now, you can’t control the motivation and pressure.

95
00:13:14.490 –> 00:13:18.829
Delegate CFO: You know, somebody’s wanting to be at the country club with their friends, you can’t control that.

96
00:13:19.040 –> 00:13:24.620
Delegate CFO: Rationalization. Now, you can talk to an employee about how, you know, great and valuable they are.

97
00:13:24.930 –> 00:13:32.449
Delegate CFO: But you can’t control how they’re rationalizing, hey, I should have a bonus, or I should get paid more than so-and-so type situation. You can’t control that.

98
00:13:33.020 –> 00:13:45.500
Delegate CFO: But you can’t control perceived opportunity, and that is your internal controls. So if you control that perceived opportunity, you more or less have removed that leg on a three-legged stool, and what happens?

99
00:13:45.660 –> 00:14:01.150
Delegate CFO: it falls over. And so… and then you don’t have fraud happen. And so that’s why it’s key, even though when we talk about fraud triangle, I can think of it as a stool, and the one area that you can definitely control is your… the perceived opportunity. So, let’s get into…

100
00:14:01.290 –> 00:14:05.959
Delegate CFO: The main basis, or the main, foundation for internal controls.

101
00:14:06.860 –> 00:14:10.319
Delegate CFO: So, a lot of you have probably heard that

102
00:14:10.640 –> 00:14:14.190
Delegate CFO: With internal controls, you have what’s called segregation of duties.

103
00:14:14.340 –> 00:14:22.050
Delegate CFO: And segregation of duties is really broken down into four main areas. Authorization, custody, recording, and monitoring.

104
00:14:22.510 –> 00:14:41.289
Delegate CFO: Now, authorization, just like the name says, that’s the ability to authorize a transaction, whether it’s authorized to sign the check, or authorized to, do a purchase agreement, or purchase product from a vendor, you have some sort of ability to authorize a particular transaction, or even sign a lease agreement.

105
00:14:42.040 –> 00:14:49.039
Delegate CFO: Custody of assets. Again, 20 years ago, this was predominantly centered around who has custody of the actual checkbook.

106
00:14:49.080 –> 00:14:59.749
Delegate CFO: But today, it’s really who has access to the bank statement, electronic funds, or EFTA funds, who has access to the actual physical documents.

107
00:14:59.750 –> 00:15:11.459
Delegate CFO: Who has access to the… by physical documents, the actual checks, and who collects payments? You know, that’s an asset. So who has custody of these particular assets?

108
00:15:11.710 –> 00:15:23.140
Delegate CFO: Recording, again, who records the transaction into the accounting records? You know, into QuickBooks Zero, what have you. Who does the actual recording of the transaction in there? And then monitoring.

109
00:15:23.350 –> 00:15:27.159
Delegate CFO: Monitoring is where you’re reviewing

110
00:15:27.300 –> 00:15:46.639
Delegate CFO: all the processes, you know, reviewing that transaction, is this transaction correct? Reviewing that journal entry. You’re monitoring and or reviewing the bank reconciliation. So you’re performing a review level. You’re not doing all these particular steps, but you’re going back and reviewing all that. Now, of all these duties.

111
00:15:46.890 –> 00:15:49.510
Delegate CFO: Let me take a step back.

112
00:15:49.780 –> 00:16:00.669
Delegate CFO: In the textbooks that you see in college, they always say that you have one person in each one of these areas. One person does authorization, another person has custody, recording, monitoring.

113
00:16:01.160 –> 00:16:15.139
Delegate CFO: In the real world, that’s not feasible for small and medium businesses. You can’t afford to have literally one person in every single area. Now, as a small and medium business, a lot of times, some of these duties are intertwined with the same person.

114
00:16:15.480 –> 00:16:16.640
Delegate CFO: However…

115
00:16:16.720 –> 00:16:36.710
Delegate CFO: as the owner, executive management of your company, that monitoring function should never leave your, grasp. You should be the one that does that. Not only has the ability to do it, but you should be doing it consistently. Because most frauds that you see, again, if you go and type in bookkeeper fraud.

116
00:16:36.800 –> 00:16:38.299
Delegate CFO: If you read those stories.

117
00:16:38.480 –> 00:16:44.790
Delegate CFO: one, I suggest you look at this particular slide when you read those stories to see, you know, okay, who had authorization, who had custody, etc.

118
00:16:45.060 –> 00:16:56.620
Delegate CFO: But the monitoring is usually why that fraud happened, because they were… the controls were not being monitored, cash wasn’t being reviewed, bank statements weren’t being reviewed. And so, of all these controls.

119
00:16:56.740 –> 00:17:02.369
Delegate CFO: That monitoring function should stay with you, the owner, or executive management.

120
00:17:03.200 –> 00:17:03.980
Delegate CFO: No.

121
00:17:04.109 –> 00:17:11.169
Delegate CFO: Again, like we just mentioned, if one person has access to all four areas of the segregation of duties.

122
00:17:11.450 –> 00:17:13.530
Delegate CFO: Then the business will be ripe for fraud.

123
00:17:13.910 –> 00:17:15.680
Delegate CFO: Go back, do your Google search.

124
00:17:15.819 –> 00:17:28.650
Delegate CFO: I can almost guarantee every single one of those, there was a situation where that person had access to all four, or they had access to three, but the monitoring was never being done by the other person, so…

125
00:17:28.840 –> 00:17:37.720
Delegate CFO: de facto, they had access to all four. So, if somebody has access to all four of those items, you are heavily ripe for fraud in your organization.

126
00:17:39.460 –> 00:17:42.100
Delegate CFO: So what are internal controls?

127
00:17:44.990 –> 00:17:46.620
Delegate CFO: Internal control is really…

128
00:17:46.810 –> 00:17:52.409
Delegate CFO: Are going to be your policies, procedures, and systems that you have to protect your assets.

129
00:17:52.620 –> 00:18:02.370
Delegate CFO: One way to think about it, and I’ve done presentations before for businesses that are going through incubation centers.

130
00:18:02.690 –> 00:18:13.709
Delegate CFO: is… imagine if you took your wallet. You know, let’s say you have, you know, $500 cash in there, you’ve got several credit cards in there. Would you take your wallet, if you were, like, in a classroom setting.

131
00:18:13.820 –> 00:18:20.910
Delegate CFO: Put it down on a desk, walk away for a couple hours, and then come back and expect all your cash to be there, your wallet to be there.

132
00:18:21.230 –> 00:18:23.270
Delegate CFO: Probably not, and you probably wouldn’t do that.

133
00:18:23.730 –> 00:18:30.950
Delegate CFO: That’s the same thing that happens with your business when you don’t have controls in place. You’re really doing that.

134
00:18:31.120 –> 00:18:47.700
Delegate CFO: And so, back to what are internal controls. They’re really policies and procedures designed to protect your assets. You know, they’re designed to prevent or detect and respond to errors or fraud. And errors do happen, so don’t… anytime something is out of whack.

135
00:18:47.750 –> 00:18:53.550
Delegate CFO: Don’t immediately assume fraud, because sometimes they’re, you know, we’re all human, so we, you know, could mispost something.

136
00:18:54.200 –> 00:19:00.549
Delegate CFO: The key elements, obviously, are the segregation of duties, authorization process, checks and balances. So, back to that first bullet point.

137
00:19:00.820 –> 00:19:02.500
Delegate CFO: Policies, procedures.

138
00:19:02.700 –> 00:19:14.170
Delegate CFO: You want to make sure you detail out that, because a lot of times what you’ll find is if you have to write out a memo saying, you know, this is what this person does, this is what that person does, you start realizing.

139
00:19:14.470 –> 00:19:20.819
Delegate CFO: Jane actually has access to all these areas, and you don’t really realize that until you start printing it out.

140
00:19:20.920 –> 00:19:35.829
Delegate CFO: But when you put those policies and procedures in place, you then set up the structure for your company, because all companies have turnover, even in your county department. You know, people retire, lead to another job, termination, what have you.

141
00:19:36.270 –> 00:19:47.200
Delegate CFO: When you bring that other person in, you want to have those policies and procedures in place to be able to identify, or be able to have them know what their control processes are.

142
00:19:47.350 –> 00:19:54.500
Delegate CFO: And just a side note, on my forensic side of my company, when I do an investigation.

143
00:19:54.640 –> 00:20:01.350
Delegate CFO: one of the first things I do, I mean, obviously, there was an incident that happened for, you know, the particular companies to give me a call to begin with.

144
00:20:01.530 –> 00:20:08.549
Delegate CFO: But one thing I’ll do is, I will just sit down with them, and I’ll just document what their controls are, in just a memo form.

145
00:20:08.760 –> 00:20:22.060
Delegate CFO: reason being is that will then lead me to understand, okay, there’s a weakness here, you know, this, you know, Jane had access to the cash, you know, didn’t, you know, no bank recs were done, nobody monitored that, so I’m looking at cash.

146
00:20:22.160 –> 00:20:33.960
Delegate CFO: Whereas, you know, Fred may be doing the payroll, but Jane was HR, and she did the payroll rates, but Fred just did the payroll. I might not be as concerned on ghost employees on that situation, so…

147
00:20:34.200 –> 00:20:42.390
Delegate CFO: Writing it out will help you identify where your weaknesses are, and then you can, from there, start molding what your controls need to be.

148
00:20:44.040 –> 00:20:48.130
Delegate CFO: Now, what is the cost of doing nothing?

149
00:20:49.750 –> 00:20:54.860
Delegate CFO: Obviously, as we already noted, Lost that income.

150
00:20:55.010 –> 00:21:01.609
Delegate CFO: People steal from you, they’re gonna steal from your bottom line. So, right there, there’s lost net income.

151
00:21:01.840 –> 00:21:03.710
Delegate CFO: The other cost? Attorney fees.

152
00:21:03.800 –> 00:21:07.430
Delegate CFO: So you catch somebody committing fraud.

153
00:21:07.470 –> 00:21:24.920
Delegate CFO: odds are you’re probably going to go after them civilly. Hopefully, you also go after a criminal, and we’ll talk about that in a second, but if you’re going after civilly, you’re going to need to go and get an attorney, preferably one that can do litigation, and you’re going to have costs for the attorney fees.

154
00:21:25.110 –> 00:21:38.220
Delegate CFO: forensic accountant. You’re going to have to pay for an expert to go through, because if you go to court, obviously, civil, you need to have some sort of report indicating, here’s the total amount of

155
00:21:38.370 –> 00:21:46.279
Delegate CFO: Funds that were stolen, this is how she did it, this is, you know, over this time span, etc, etc. So you have to pay for a forensic accountant to go through there.

156
00:21:46.770 –> 00:22:06.229
Delegate CFO: So those are all just actual monetary fees. Now, you’ve got your own time spent on investigation, meetings, court dates. You know, you’ve got to meet with the attorney to go through it, so that’s time out of your day. You know, you’ve got to meet with… if you’re doing criminal, you’ve got to go down to the police department and meet with the detective, so that’s time out of your day.

157
00:22:06.580 –> 00:22:07.899
Delegate CFO: We go to court.

158
00:22:08.090 –> 00:22:16.489
Delegate CFO: Both civil and criminal, you know, you’re probably going to be in court for a while, so all that takes up time, not only the actual meetings themselves.

159
00:22:16.790 –> 00:22:35.500
Delegate CFO: But a lot of times, you have to prep for those meetings, and so you’re going to have that as well. So all that is just your own personal time that you could be spent working on the company. You’re now being spent on doing this. Possible lost revenue and opportunities. Obviously, you know, lost revenue could be if…

160
00:22:35.500 –> 00:22:53.850
Delegate CFO: the bookkeeper was stealing accounts receivable, and you call up your best customer and say, ask them why they haven’t paid, and in reality, they actually had paid, and you just alienated your best customer, and they might not do business with you again. So, you know, there’s always that possibility. And then, of course, opportunities.

161
00:22:53.850 –> 00:23:02.849
Delegate CFO: You know, if they’re stealing from you, again, they’re stealing your net income, so you don’t have that extra cash to, you know, expand your warehouse to be able to offer more products or…

162
00:23:02.990 –> 00:23:16.610
Delegate CFO: quantity of product, or hire that next programmer to come in for your SaaS company, you’re going to lose those opportunities, because you just don’t have the cash to be able to do that. Personal assets.

163
00:23:16.880 –> 00:23:23.629
Delegate CFO: Now, I’ve seen this a number of times, if you recall back on our previous slide, let’s go back to that real quick, on, …

164
00:23:23.970 –> 00:23:25.240
Delegate CFO: that quote.

165
00:23:25.500 –> 00:23:26.730
Delegate CFO: Where it said.

166
00:23:27.370 –> 00:23:35.029
Delegate CFO: But even the company was profitable, when all the while, the problem was Raimel’s investment funds. You know, the owners were putting their own personal money in there.

167
00:23:35.280 –> 00:23:41.360
Delegate CFO: I have seen a number of times where a particular owner,

168
00:23:41.670 –> 00:23:46.759
Delegate CFO: Has had to sell their own personal assets to keep their company going.

169
00:23:46.860 –> 00:24:02.350
Delegate CFO: They believed their company was failing, they didn’t want it to fail, so they had some investment assets, I believe it were rentals that they ended up selling. I think one guy ended up selling his boat, selling a car, you know, so that then they had the funds to keep their company afloat.

170
00:24:02.640 –> 00:24:14.909
Delegate CFO: And this is all because a fraud happened. In this particular situation, this individual, this owner, had had this personal asset in the family for quite some time, and ended up having to sell it.

171
00:24:15.010 –> 00:24:24.880
Delegate CFO: And he shouldn’t have had to sell it, because this lady had stolen from him. And recovery is highly unlikely. This is part of the cost of doing nothing.

172
00:24:25.150 –> 00:24:32.100
Delegate CFO: Most of the time, from what I’ve seen, is when an employee embezzles, there’s a particular employee embezzlement.

173
00:24:32.280 –> 00:24:36.829
Delegate CFO: They usually use the money on items that aren’t tangible.

174
00:24:37.090 –> 00:24:45.630
Delegate CFO: And by that, I mean they’ll take a trip to Italy. You know, they’ll go on a Caribbean cruise. They’ll go to Vegas and gamble a whole bunch.

175
00:24:45.630 –> 00:25:00.099
Delegate CFO: So they’re using all that money, but they’re not buying physical assets. It’s not like they’re buying Bitcoin or real estate. They’re just using it and blowing it on stuff that can never be recovered. And then conversely, if they do buy an asset.

176
00:25:00.200 –> 00:25:09.950
Delegate CFO: Oddly enough, they don’t take good care of that asset. So I’ve seen situations where individuals bought, you know, either high-end pickup trucks or luxury cars.

177
00:25:10.170 –> 00:25:17.629
Delegate CFO: And they just didn’t take care of it. It was just all beat up by the time we got to the fraud and collections standpoint.

178
00:25:17.740 –> 00:25:18.860
Delegate CFO: And…

179
00:25:19.220 –> 00:25:36.169
Delegate CFO: I… just based on the small sample I’ve seen, for some reason, when people commit fraud and they buy a personal asset, I believe it’s probably because it’s… they weren’t… they didn’t have to earn the money to get that asset, so they have very… they don’t care for the asset as well as most people would.

180
00:25:36.230 –> 00:25:39.289
Delegate CFO: So, that’s one of the things to keep in mind. Again.

181
00:25:39.410 –> 00:25:41.479
Delegate CFO: They may have bought a physical asset.

182
00:25:42.030 –> 00:25:53.140
Delegate CFO: But it’s probably all torn up. So, recovering of what they stole is very highly unlikely. Again, you can get a judgment and start collecting, but

183
00:25:53.320 –> 00:26:01.529
Delegate CFO: how much you’re going to collect and how long that period is, that’s going to be up in the air. One thing I will add to this, it’s not on this slide.

184
00:26:02.230 –> 00:26:07.539
Delegate CFO: Usually when… You catch somebody committing fraud, embezzlement.

185
00:26:07.800 –> 00:26:14.139
Delegate CFO: they will only admit to what they think you know. And I’ve seen statistics that

186
00:26:14.310 –> 00:26:20.810
Delegate CFO: Usually, you know, whatever they tell you, you need to multiply that by, I believe it was, like, 5 or 6.

187
00:26:21.030 –> 00:26:27.439
Delegate CFO: Because they’re not gonna admit to the full amount. They’re only going to admit to what they think you know, that they stole.

188
00:26:27.650 –> 00:26:42.640
Delegate CFO: The other aspect is, and I’ve seen this before, sometimes I don’t even know how much they stole. You know, I had one case where an individual had been stealing from this company for at least 12 years, probably more. We didn’t have enough records to go back any further.

189
00:26:42.930 –> 00:27:00.019
Delegate CFO: And it was multiple transactions each month, sometimes one month it would be a couple transactions, sometimes, you know, it would be up to, you know, 14 transactions in a month. So this happened over years and years and years, and one of the things I had informed the detective, because this was going through criminal.

190
00:27:00.190 –> 00:27:18.829
Delegate CFO: is this individual probably doesn’t even know how much they stole. And again, same thing, is they blew a lot of it on stuff that wasn’t tangible. So, the owner is probably not going to collect, or is going to collect pennies on the dollar. So again, this is all the cost of not doing anything with your respective internal controls.

191
00:27:20.670 –> 00:27:21.650
Delegate CFO: No.

192
00:27:21.810 –> 00:27:25.849
Delegate CFO: Excuse me, core internal controls every small business needs.

193
00:27:26.260 –> 00:27:29.419
Delegate CFO: And actually every business, but in particular small businesses.

194
00:27:29.550 –> 00:27:33.680
Delegate CFO: Bank reconciliations, they need to be done and done timely.

195
00:27:33.870 –> 00:27:37.449
Delegate CFO: I actually had a case once where

196
00:27:37.630 –> 00:27:46.699
Delegate CFO: But it was a bookkeeper for kind of a smallish company, and again, they didn’t monitor her. She ended up, you know, she was committing embezzlement.

197
00:27:46.810 –> 00:27:48.590
Delegate CFO: But she had never done a bank wreck.

198
00:27:48.980 –> 00:27:56.490
Delegate CFO: And they never said anything. And we had came in, and we actually weren’t doing a fraud investigation, we were just doing a financial statement audit.

199
00:27:56.810 –> 00:28:13.620
Delegate CFO: And we can never get the bank wreck. And this had been going… apparently, this has been going on for years. And finally, we got the bank wreck, and there were all these errors in it. And, you know, we just kept asking, why are there errors? And again, that’s eventually where it fell out, that there was, embezzlement.

200
00:28:13.870 –> 00:28:29.279
Delegate CFO: But if she had been doing the bank rec, or, you know, been doing the bank rec, and timely, and it had been monitored, this would have all been caught, pretty quick. Again, unfortunately, this was one of those situations, and it’s not uncommon that,

201
00:28:30.190 –> 00:28:37.949
Delegate CFO: the ownership terminated her, I think they went after her civilly, but they didn’t press, criminal charges, and that’s not uncommon.

202
00:28:38.090 –> 00:28:41.780
Delegate CFO: when criminal charges aren’t filed. Again, that’s…

203
00:28:41.900 –> 00:28:52.869
Delegate CFO: Due to reputation risk, they don’t, you know, the company doesn’t want to be in the local paper, all that. My recommendation, especially when I take on a new client or a new forensic case.

204
00:28:52.870 –> 00:29:02.009
Delegate CFO: Is that you prosecute. If there is, obviously, fraud there, that you move it to the criminal aspect, because if you don’t.

205
00:29:02.010 –> 00:29:20.049
Delegate CFO: person’s gonna do it again, and with all how HR rules are, I believe you can’t tell, you know, the new employer that you fired, you know, Susie because she committed fraud. So, unless there was a criminal charge. So that’s why I always say, if you’re going to do it, make sure you file criminally.

206
00:29:20.280 –> 00:29:24.619
Delegate CFO: So, other internal control. Many audits done monthly, so…

207
00:29:24.740 –> 00:29:44.019
Delegate CFO: For our CFO clients, we do mini-audits every month, regardless. And what a mini-audit is, is you take the balance sheet, and you tie out each of those accounts to source documents. So again, cash is going to be the first line item of your balance sheet, should tie out to your bank statement and your bank reconciliation, that should work.

208
00:29:44.110 –> 00:29:58.410
Delegate CFO: accounts receivable, that should tie out your AR subsidiary ledger. Those two should tie back and forth. Obviously, review your AR subsidiary ledger, make sure there’s old stuff on there that, you know, isn’t suspect. And you go through that, so everything is getting tied out.

209
00:29:58.560 –> 00:30:10.389
Delegate CFO: And this is actually what we did for one of… we had a client that was a small not-for-profit that had hired a lady to be the controller, but she really didn’t have controller experience.

210
00:30:10.500 –> 00:30:19.519
Delegate CFO: And so this is literally what we had her do each month, was a mini-audit. And by that is, you know, she just had an old physical binder, she’d print out the trial balance.

211
00:30:19.810 –> 00:30:37.170
Delegate CFO: Not each of the things, you know, so the bank rec would be your first item right behind the trial balance, and then she’d have her AR subsidiary right behind it. So everything was supported, so she was doing this mini-audit every month. And again, when you do that, if any kind of fraud is happening and being hidden on the balance sheet, it’s going to fall out very quickly.

212
00:30:37.350 –> 00:30:48.480
Delegate CFO: physical security of assets, including electronics. And by electronic, what I’m talking about is bank statements, and in particular wires, ACHs, those type things.

213
00:30:48.950 –> 00:31:08.630
Delegate CFO: dual authorization for payments. Again, for certain levels, a lot of companies require dual authorization, and especially on wires, you know, that should have a dual authorization on there that, you know, the person initiates it, and it can’t go through until the owner comes in and signs off as well.

214
00:31:08.990 –> 00:31:14.330
Delegate CFO: And budget to actual, and as you see there, hint, this is extremely important.

215
00:31:14.490 –> 00:31:22.330
Delegate CFO: Obviously, you need to have a budget in place, and if you need help with a budget, give us a call. We’ll help you put a budget together for your company.

216
00:31:22.670 –> 00:31:25.899
Delegate CFO: But every month, you need to do a budget to actual.

217
00:31:25.970 –> 00:31:39.480
Delegate CFO: Because a lot of times, that is one of those monitoring functions that, a weakness will pop out very quickly. Because let’s say office supplies… let’s say you budgeted $20,000 for the year for office supplies.

218
00:31:39.540 –> 00:31:46.349
Delegate CFO: We’re in June, and you’re already at 30,000, so you have a 10,000 delta, and you’re only halfway through the year.

219
00:31:46.430 –> 00:32:00.349
Delegate CFO: that’s going to spark your interest, you’re going to dig down further and find out, okay, why do we put $30,000 in there when we only budgeted 20 for the entire year? And so then that becomes one of your monitoring control functions. And again, this is huge for internal controls.

220
00:32:00.400 –> 00:32:08.230
Delegate CFO: If you go back and look at a lot of the videos on Elon Musk when he was doing the Doge, issues.

221
00:32:08.370 –> 00:32:11.139
Delegate CFO: One of the things he noted in one of his interviews

222
00:32:11.240 –> 00:32:29.539
Delegate CFO: was the lack of budgets in the, some of those federal departments. Well, if you don’t have a budget, how do you know you’re going to be over budget, under budget, and expenses authorized, if you’re not being able to compare it to something? So, that’s why we say budget to actual is extremely important, control with your small business.

223
00:32:31.310 –> 00:32:33.600
Delegate CFO: So, how do you implement this?

224
00:32:33.960 –> 00:32:42.900
Delegate CFO: Again, assign responsibilities so no one person handles a transaction from start to finish. Again, segregation of duties, those four areas.

225
00:32:42.960 –> 00:32:49.629
Delegate CFO: That one person should not have access to all four areas. Use accounting software, permission settings, and logins.

226
00:32:49.660 –> 00:33:06.129
Delegate CFO: And you’ll see that logins is underlined. First, the permissions. Obviously, you have an AP clerk, they really should have no reason to have access to AR, or the AR clerk shouldn’t have access to AP. So, you obviously set up the permissions correctly.

227
00:33:06.230 –> 00:33:14.709
Delegate CFO: The other aspect is logins. Now, unfortunately, with QuickBooks, the standard login, user ID is admin.

228
00:33:15.630 –> 00:33:25.400
Delegate CFO: That becomes a problem when there’s fraud that happens, because as a forensic accountant, trying to prove that John was the one that stole this money.

229
00:33:25.530 –> 00:33:33.890
Delegate CFO: it becomes a little difficult, because you go into the transaction to see who posted it, and it just says admin. And so…

230
00:33:34.120 –> 00:33:47.309
Delegate CFO: defense will come back and say, well, anyone could have done that, it’s admin. So that’s why your logins need to be specific to that individual. So John has his own admin, Susie has her own ad… or login, sorry, not admin, login.

231
00:33:47.330 –> 00:33:59.050
Delegate CFO: And all those transactions are tagged with that respective information. And so that’s why it’s key that you put those names in there. Again, if you just do admin, it makes it more difficult to prove

232
00:33:59.280 –> 00:34:01.359
Delegate CFO: That respect of fraud, no.

233
00:34:01.570 –> 00:34:10.929
Delegate CFO: there’s workarounds for it, but it makes life so much easier if you can go in and see that, you know, John went and modified this transaction at 6 PM,

234
00:34:10.929 –> 00:34:21.780
Delegate CFO: You know, when the company closes at 5, you know, and it’s, here’s his login, here’s the timestamp type situation. So that’s why you want to make sure that each person has their own specific login to their name.

235
00:34:21.989 –> 00:34:30.709
Delegate CFO: And make sure nobody knows anyone else’s login and passwords. You know, those passwords should remain with your IT. If you don’t have an IT department.

236
00:34:31.170 –> 00:34:48.020
Delegate CFO: HR, just make sure HR doesn’t have access to the county records, and then you’ll have controls there, because I have seen situations where an individual that was committing embezzlement had access to other logins and was using those logins, to further their embezzlement.

237
00:34:48.630 –> 00:34:54.149
Delegate CFO: Require management approval for purchases over a dollar, certain dollar amount, again.

238
00:34:54.550 –> 00:34:56.539
Delegate CFO: You need to, obviously, you know.

239
00:34:56.690 –> 00:35:00.250
Delegate CFO: Set the dollar amount, but, you know, if the purchasing manager

240
00:35:00.340 –> 00:35:17.519
Delegate CFO: you know, is making a $150 supply purchase, you probably don’t need to have manager approval on that now. It’s $150,000, yes, so you need to determine what approval level you need that, one, doesn’t hinder the business, but two, provides control for your company.

241
00:35:17.730 –> 00:35:19.989
Delegate CFO: Again, can’t stress this enough.

242
00:35:20.180 –> 00:35:24.899
Delegate CFO: review the bank statements monthly, and by bank statements, I also mean the bank reconciliation.

243
00:35:25.090 –> 00:35:39.700
Delegate CFO: If you don’t know how to do a bank reconciliation or what it’s telling you, there are a number of videos there, or you can even contact us, because it’s very important you understand what’s going in and out and how that bank reconciliation works.

244
00:35:40.050 –> 00:35:42.669
Delegate CFO: Now, maybe if you’ve never done one before.

245
00:35:42.820 –> 00:35:55.520
Delegate CFO: maybe kind of a struggle the first month or two, but once you understand it, it’ll be very quick and easy for you to be able to review that. But again, if you’re not reviewing that, it’s going to be very hard to catch fraud, because keep in mind.

246
00:35:55.960 –> 00:36:00.840
Delegate CFO: Almost everything in your financial statements pivots around the bank account.

247
00:36:00.980 –> 00:36:12.209
Delegate CFO: If you think about that, that’s going to be your cornerstone for pretty much everything else within the financial statement. So you need to make sure that number is correct and tied out and understood, before you start breaking down everything else.

248
00:36:12.980 –> 00:36:30.769
Delegate CFO: Inventory counts, obviously do surprise the schedule. If you have valuable inventory that could be stolen. Again, surprised ones are key. You should be doing schedule counts regardless of this, because you need to understand what your order point is, how much you need to order, etc, etc.

249
00:36:30.860 –> 00:36:47.819
Delegate CFO: But if you’ve got valuable inventory, you need to make sure you’re doing those counts on a surprise basis. And if you want to see something rather impressive, if you look up one of the diamond companies, like Debris, you look at them.

250
00:36:47.820 –> 00:37:04.900
Delegate CFO: and look up their controls. I won’t go over them, but they’re just, like, you know, because a diamond is highly valuable and teeny tiny, they have very, very specific controls, and it’s just eye-opening, and it makes sense, but it’s just eye-opening when you read those controls.

251
00:37:06.020 –> 00:37:15.870
Delegate CFO: Now, red flags, warning signs, again, unexplained cash shortages. Back to that quote we had in that, story.

252
00:37:16.540 –> 00:37:20.550
Delegate CFO: The company, the owners thought they weren’t making money, so they had to put cash in.

253
00:37:21.140 –> 00:37:30.480
Delegate CFO: Unexplained cash shortages hit. And again, this also goes back to your budget, you know, because you’re… when you’re budgeting your… and most people were budgeting their income statement.

254
00:37:31.720 –> 00:37:35.930
Delegate CFO: If you’re not hitting those budgets, obviously that’s going to impact cash.

255
00:37:36.030 –> 00:37:45.199
Delegate CFO: And that’s another budget to actual that you’ll have, is, okay, this is what I expect my cash runway to be, and why did that runway all of a sudden go from

256
00:37:45.300 –> 00:38:00.569
Delegate CFO: say, 18 months, now it’s retracted to 12 months. And again, that’s going to be part of your monitoring function, but any unexplained cash shortages that require, oh man, I need to put in cash now, that needs to be a red flag. Now, one caveat to that

257
00:38:00.760 –> 00:38:04.580
Delegate CFO: If you’re in an industry that all of a sudden your sales are just rocketing up.

258
00:38:04.810 –> 00:38:18.989
Delegate CFO: you get into that weird situation where you have a ton of sales, but because of collection procedure, you know, you may sell to, say, Walmart or whoever, and so your sales have gone from, say, $10 million, now you’re up to 15 million, and it’s just rocketing up.

259
00:38:19.520 –> 00:38:31.719
Delegate CFO: But you don’t collect on those sales until later, but you’ve got to pay for all the expenses up front, and so you wind up in kind of a weird cash shortage situation. So that is a situation where you do wind up a cash shortage.

260
00:38:31.720 –> 00:38:40.130
Delegate CFO: It’s not internal control, it is just because of the projection of your business, but you still need to be able to explain cash shortages.

261
00:38:40.500 –> 00:38:44.660
Delegate CFO: Excessive voids or credits, again, obviously, if somebody’s voiding transactions.

262
00:38:45.040 –> 00:39:03.940
Delegate CFO: They may be pocketing cash. Again, this goes back into cash shortages, budget actual fluctuations, again, we’ve gone through that. Missing documents, you know, that’s obviously a red flag. You know, if you have a vendor invoice that, you know, you paid the vendor invoice, but just so happens that particular vendor

263
00:39:04.210 –> 00:39:09.099
Delegate CFO: You can’t find the invoice for, but you have the invoice for everybody else. That’s a huge red flag.

264
00:39:09.410 –> 00:39:11.819
Delegate CFO: Employees who never take time off.

265
00:39:13.610 –> 00:39:16.420
Delegate CFO: Now, this is mainly centered around the accounting staff.

266
00:39:16.810 –> 00:39:20.670
Delegate CFO: Or, also inventory, personnel.

267
00:39:20.810 –> 00:39:24.550
Delegate CFO: The reason why they don’t take time off, because they know

268
00:39:24.720 –> 00:39:34.350
Delegate CFO: that their fraud has gotten to a point that if they do, it’s gonna unravel, or it’s gonna be discovered fairly quickly. And again.

269
00:39:34.530 –> 00:39:39.369
Delegate CFO: Another way around this for those employees that commit fraud, they may take time off.

270
00:39:39.620 –> 00:39:47.300
Delegate CFO: But they make a big show of, well, don’t let so-and-so into the records, because they’re just going to mess it up, and it’ll take me forever, so…

271
00:39:47.440 –> 00:39:57.360
Delegate CFO: I’ll fix that when I get back, or I’ll, you know, keep doing the accounting, you know, I’m gonna be gone for 2 weeks, but I’ll keep doing the accounting when I get back. Don’t let… don’t let John into the records.

272
00:39:57.520 –> 00:40:03.719
Delegate CFO: That’s a way they get around that, you know, not taking time off, because they want to take time off, but they also don’t want you to discover their fraud.

273
00:40:03.870 –> 00:40:08.800
Delegate CFO: But, if you have employees that aren’t taking time off, that’s a huge red flag. Now.

274
00:40:09.250 –> 00:40:17.259
Delegate CFO: I will admit, I did have a situation where this individual didn’t take time off for years and years and years.

275
00:40:17.440 –> 00:40:24.770
Delegate CFO: And it came about that they were actually using their PTO as kind of a retirement vehicle, because if you think about it.

276
00:40:25.030 –> 00:40:36.050
Delegate CFO: You know, if you have, say, 80 hours of PTO, each year you get a raise, let’s say you get 5% raise, well, you’re making 5% on the 80 hours that you, you know, had banked, you know, several years ago.

277
00:40:36.220 –> 00:40:46.289
Delegate CFO: And then she was also getting more hours, so it was adding on to that, so it just compounded. And so her… her PTO, I think, got up to, like, $50,000.

278
00:40:46.350 –> 00:40:57.850
Delegate CFO: We ended up fixing that situation, but that was one of the rare times where somebody didn’t take time off, and it was strictly because of… they were using it as another aspect for the retirement.

279
00:40:58.770 –> 00:41:10.050
Delegate CFO: And vendors with similar addresses and employees, obviously you do not expect a vendor to literally have the same address as employees. The other thing to keep in mind is.

280
00:41:10.650 –> 00:41:13.830
Delegate CFO: If you want to, and this is kind of, …

281
00:41:13.970 –> 00:41:22.500
Delegate CFO: back in control. Review your vendor lists at least quarterly, just print it out and go through it. Reason being is…

282
00:41:22.740 –> 00:41:27.030
Delegate CFO: there’s another type of fraud that is external fraud that can hit you, so if…

283
00:41:27.160 –> 00:41:36.970
Delegate CFO: Let’s say you were doing business with ABC Company, and that was, like, 3 years ago, and you haven’t done business with them, but they’re set up in your system.

284
00:41:37.120 –> 00:41:49.190
Delegate CFO: you know, there could be an unscrupulous person at ABC that says, well, I’m going to send an invoice to them and see if they’ll actually pay it. And that actually does happen. Actually, I think it happened to a very large company, like IBM or one of them.

285
00:41:49.390 –> 00:42:01.539
Delegate CFO: Where a vendor just sent an invoice just to see if the company would pay it. And so that’s an external fraud. Now, the internal fraud is where you have… let’s say you have ABC, and let’s say it’s called ABC Company.

286
00:42:01.770 –> 00:42:08.740
Delegate CFO: And then somebody goes in and makes ABC Companies and puts an S at the end. You know, they intentionally misspell it.

287
00:42:09.140 –> 00:42:24.940
Delegate CFO: you as an owner, you know, maybe signing checks, you see it, you don’t catch that, you know, there’s an extra S on it. Just sign the check, send it out. In the meantime, that employee has just set up a fake bank account to cash it, so it says ABC’s company.

288
00:42:24.970 –> 00:42:44.250
Delegate CFO: And then they pocket the cash. So, again, you want to review your vendor list to make sure there’s not any unusual… one, there’s not unusual vendors, and two, any vendors you haven’t done business with, you want to either terminate or discontinue that vendor in the system so that if a fake invoice comes from them.

289
00:42:44.430 –> 00:42:49.310
Delegate CFO: It’s immediately gonna pop up, and everybody’s gonna take a second to take a look at that, so…

290
00:42:49.450 –> 00:42:53.830
Delegate CFO: Let’s go ahead and go into… R.

291
00:42:54.180 –> 00:42:59.419
Delegate CFO: Q&As, take a look here. So, we’ve got… Several questions here.

292
00:42:59.900 –> 00:43:05.930
Delegate CFO: go ahead and take a look at some of these questions. Give me one second.

293
00:43:08.850 –> 00:43:12.220
Delegate CFO: Okay, so these are pretty good questions here. So…

294
00:43:12.800 –> 00:43:15.540
Delegate CFO: A three-person office… let me move this…

295
00:43:16.210 –> 00:43:22.630
Delegate CFO: 3-person office, net 120 clients, how do I make… no one has time.

296
00:43:22.820 –> 00:43:26.939
Delegate CFO: compatible with segregation of duties. …

297
00:43:27.170 –> 00:43:33.340
Delegate CFO: again, first thing is somebody steals from you, they’re gonna steal from your bottle of wine, so that’s one of the keys. But…

298
00:43:33.770 –> 00:43:41.730
Delegate CFO: you need to make sure that the monitoring function is separate from all the other. You know, if you’re a three-person office.

299
00:43:41.910 –> 00:43:58.059
Delegate CFO: My guess is you’re having to have people do multiple tasks in multiple areas. You just need to make sure you mitigate that by taking the monitoring function, and that is with the ownership, executive management. You know, don’t let

300
00:43:58.180 –> 00:44:02.659
Delegate CFO: If you’re just using one of those people, don’t let them do all of it. And again.

301
00:44:03.260 –> 00:44:07.760
Delegate CFO: That quote of, no one has time, you still have to get your, you know.

302
00:44:07.980 –> 00:44:24.160
Delegate CFO: Billings done, bills paid, you know, income-end type situation. So you still have that that has to go on. So just make sure that that monitoring function stays outside of the purview of the individuals, which is probably going to be doing multiple areas of the segregation issue.

303
00:44:25.500 –> 00:44:30.550
Delegate CFO: If the CPA who does our taxes is also our outsourced CFO,

304
00:44:31.060 –> 00:44:37.269
Delegate CFO: Does that satisfy independent review, or do we need a different set of eyes on the bank rec?

305
00:44:37.810 –> 00:44:48.879
Delegate CFO: Well, first, Yes, that satisfies the independent review. They’re really going to be producing and doing the bank rec.

306
00:44:49.170 –> 00:44:54.690
Delegate CFO: And I’m assuming they are the ones doing it, or they’re reviewing it, the bookkeeper’s doing it, and they’re coming in and reviewing it, so…

307
00:44:54.910 –> 00:45:09.750
Delegate CFO: That is a key control right there. However, I still recommend that you understand what it is they’re reviewing, how they reviewed it, and they go over that with you. Because this is your company, and you really want to understand this.

308
00:45:09.780 –> 00:45:23.859
Delegate CFO: And, you know, if for some reason you expand and you become a larger company, and all of a sudden you need an actual on-site CFO, you can’t do the outsourcing anymore, because it’s just, you know, the sheer volume of everything that’s going through.

309
00:45:24.390 –> 00:45:36.330
Delegate CFO: you want to be able to understand those, bank reconciliations. So yes, it is good that they’re doing that review and it’s independent, but you still want them to go through and train you on what this is and what they’re looking at.

310
00:45:37.650 –> 00:45:46.130
Delegate CFO: We file taxes cash basis, but someone told me that gives embezzlers extra months to cover the theft.

311
00:45:46.410 –> 00:45:52.709
Delegate CFO: Should we switch to accrual just for internal reporting, even if we stay cash basis for the IRS?

312
00:45:53.950 –> 00:46:05.729
Delegate CFO: So, there’s a couple things in that particular question. First, you should always be accrual basis. You know, obviously, if you file your taxes cash basis, you know, if you go into QuickBooks.

313
00:46:05.800 –> 00:46:14.050
Delegate CFO: literally at the top, you know, when we print out the balance sheet, it has, you know, you can click the button cash, or click the button accrual. You always want to be accrual, because

314
00:46:14.180 –> 00:46:22.509
Delegate CFO: Technically, a true cash basis person would never have accounts receivable if you went to the true cash basis.

315
00:46:22.660 –> 00:46:27.410
Delegate CFO: Now you’ll have tax accountants out there saying, well, we do a hybrid.

316
00:46:28.090 –> 00:46:37.140
Delegate CFO: that’s just accountant speak for… we’re cherry-picking the accounts that we want to recognize, i.e. AR, but we don’t want to do accrual payroll type situation, so…

317
00:46:37.640 –> 00:46:41.310
Delegate CFO: Being a cruel basis is, you know, first, the key.

318
00:46:41.590 –> 00:46:47.899
Delegate CFO: And then the other part to your question about, someone told me it gives embezzlers extra much to cover the theft.

319
00:46:48.990 –> 00:46:56.940
Delegate CFO: If you’re not reviewing… or actually, there’s two aspects. One, your tax account will not catch fraud. They are not…

320
00:46:57.170 –> 00:47:00.080
Delegate CFO: Tax accounting is not designed to catch fraud.

321
00:47:00.150 –> 00:47:13.300
Delegate CFO: If you think about it, at its core level, a tax accountant does data entry. They take your data, they put it in the tax software. Now, they have to understand where it should go, what is and isn’t deductible, so on and so forth.

322
00:47:13.350 –> 00:47:26.900
Delegate CFO: But for the most part, they’re doing data entry. They’re not going through and reviewing it. Now, if they happen to find fraud, it’s probably because they happened to stumble upon it, but they’re not looking for it, and they’re… they don’t have tests designed to look for it.

323
00:47:26.990 –> 00:47:34.910
Delegate CFO: So that’s also important to note, that even though you have a tax account, they rarely will identify fraud and fine fraud.

324
00:47:35.460 –> 00:47:40.109
Delegate CFO: But the other aspect to that, where you mentioned,

325
00:47:40.220 –> 00:47:42.679
Delegate CFO: Gives embezzlers extra months to cover the theft.

326
00:47:43.040 –> 00:47:54.699
Delegate CFO: you need to be doing your monitoring monthly. You can’t do it at the end of the year, because again, you know, if you remember that slide we saw at the beginning, you know, the average fraud isn’t detected for 12 months.

327
00:47:55.210 –> 00:48:05.459
Delegate CFO: In this situation, if they happen to commit fraud in January, that would literally be 12 months of fraud going on without being detected. So you’ve got to do your controls every single month, again.

328
00:48:05.790 –> 00:48:08.519
Delegate CFO: Controls break down to doing your mini-audit.

329
00:48:08.540 –> 00:48:21.599
Delegate CFO: Looking at your bank recs, you know, looking at your budget actuals. You’ve got to do that monthly. Once you start doing that monthly, again, it gets easier. Again, all this control stuff that I’m mentioning.

330
00:48:21.600 –> 00:48:32.229
Delegate CFO: this is what our CFO company does for our clients, you know, and I believe we’re one of the few, if not the only, company that has forensic accounting as part of our CFO package.

331
00:48:33.270 –> 00:48:50.369
Delegate CFO: And then, running out of time, so the last question was just one more here. Lease copier, or… lease a copier or buy one outright. The rep claims lease auto bills quarterly and nobody checks. Could that be a place to bury a fraudulent vendor?

332
00:48:51.270 –> 00:48:59.460
Delegate CFO: Yes, you could bury a fraudulent vendor. However, It would be caught…

333
00:48:59.600 –> 00:49:07.340
Delegate CFO: If, you’re doing your budget to actual. This is actually a good thing to discuss on budget to actual.

334
00:49:07.890 –> 00:49:22.109
Delegate CFO: with your lease, or any lease, you pretty much know what your payments are going to be. So that budgeting part is pretty easy. You know, so I got a $1,000 a month lease payment, or, you know, in this case it’s quarterly. I got $5,000 every quarter that I have to pay.

335
00:49:22.590 –> 00:49:25.659
Delegate CFO: If your company buys the comp here.

336
00:49:25.990 –> 00:49:36.609
Delegate CFO: or outright purchase it, then all of a sudden you see a lease payment, that’s gonna show up instantly like a red flag, because when you get to that end of Q1, where the payment comes out.

337
00:49:36.860 –> 00:49:42.729
Delegate CFO: You’re gonna look and see, okay, here’s this lease payment for $5,000, and I have a budget of zero. Why is that?

338
00:49:43.010 –> 00:49:46.090
Delegate CFO: Then you’re going to go ahead and dig into that respective item.

339
00:49:46.330 –> 00:49:53.120
Delegate CFO: Hopefully, you’ll see, okay, why did we just pay the copier lease company $5,000 when we actually bought this?

340
00:49:53.230 –> 00:50:01.379
Delegate CFO: And then you start going down the road. Now, there may be kickbacks on the other side of that, who knows what the other aspect of that is, because

341
00:50:01.960 –> 00:50:21.119
Delegate CFO: when employees commit fraud, they want the cash out of the company. So you gotta think, how are they gonna get… how are they gonna benefit from this? Usually in this situation, if it goes to the copy machine, or copy, company, or machine… copier, company, it would probably come back as a kick map. So…

342
00:50:21.390 –> 00:50:25.519
Delegate CFO: Again, budget to actual is really key on this respective aspect.

343
00:50:26.520 –> 00:50:39.830
Delegate CFO: So, again, run out of time, so we’ll just kind of jump to the second last slides. Again, if you need help with any of this, please feel free to book a complimentary internal control consultation with us.

344
00:50:39.920 –> 00:50:50.560
Delegate CFO: We’ll go through that, and we can pretty quickly identify what your weaknesses are. Now, a full and total control review will take a little bit longer.

345
00:50:50.560 –> 00:51:00.420
Delegate CFO: But we can at least, you know, do a quick phone call and get an idea as to where your weaknesses may or may not be, in respect to the operations of your company.

346
00:51:01.320 –> 00:51:09.290
Delegate CFO: Again, my name’s Steve Haldman, I’m a CPA, and I’m founder of Delegate CFO. You can reach me at steve at delegatecfo.com.

347
00:51:09.370 –> 00:51:12.879
Delegate CFO: You can learn more about our company at DelegateCFO.com.

348
00:51:12.900 –> 00:51:32.030
Delegate CFO: And this is currently being recorded for those of you on live. The recording will be distributed out to you afterwards, as well as the respective materials. And also, one aspect that isn’t here is we will be sending everyone

349
00:51:32.030 –> 00:51:45.149
Delegate CFO: a quick internal control checklist. It’s very small, it’s like 2 pages, and it just gives you an idea as to, do you have weaknesses currently in your system? And it’s pretty much a yes-no as you go through.

350
00:51:45.160 –> 00:52:00.910
Delegate CFO: And if you hit certain barometers, it’s going to kick out and say, yeah, you probably need to review your internal control. So we’ll have that, to the people who are watching currently on live. If you’re watching this on a recording, please feel free to contact me. Again, Steve at Delegate CFO,

351
00:52:00.910 –> 00:52:10.040
Delegate CFO: And I can go ahead and get that sent out to you as soon as I can. So, again, thank you for taking the time to watch this, and I hope you have a great day.

Do you have concerns on your Internal Controls?