There are many things that go into managing and running a small business. Important among these (and often forgotten in small businesses) are establishing internal controls and preparing your employees for cyber threats.
Need more personalized help? Meet with an advisor.
Cybersecurity
Nearly 50% of cyber attacks target small businesses. Of those attacked, 60% go out of business within 6 months! You can mitigate the risk now…before it happens!
The Federal Trade Commission (FTC) has some great, easy-to-use resources to help your business understand and prepare for the various cyber attacks you can encounter. Access the information here.
Fraud & Internal Controls
Small businesses are the most vulnerable to fraud because they often don’t have effective internal controls. Internal controls are policies and procedures that will protect your business assets and reduce the risk of fraud. They can be simple, little to no cost ways that may prevent or minimize financial disaster.
REMEMBER: Every dollar stolen is a dollar out of your pocket. A small business owner should always be an active participant in the going operations of the business.
Download the handout on Internal Controls.
What are Internal Controls?
Internal controls are important because they:
- Safeguard assets
- Prevent or reduce the risk of fraud and error by employees and vendors
- Ensure proper financial reporting
- Serve as evidence of internal controls to banks and other financial institutions who may lend to your business
What are the Costs of Fraud?
Lack of internal controls can lead to fraud and be devastating to a small business.
Direct Costs:
- Loss of cash, inventory and other assets that may not be recoverable
- Cost of investigation and litigation
- May have to close the business if the loss is severe
Indirect Costs:
- Lost reputation and trust of vendors, creditors, and customers
- Loss of trust for other employees
- May need to lay off employees
10 Essential Internal Controls for Small Businesses
- Segregation of duties – By requiring more than one person to complete a task, you reduce the risk of mistakes and inappropriate or fraudulent actions. The individual responsible for bank reconciliation should not make bank deposits or have custody of checks.
- Background checks – Do a criminal and civil background check prior to hiring and check references. Be aware that prior businesses may not have filed charges if fraud was committed.
- Educate employees about fraud and internal controls. Small businesses should conduct annual training on fraud: what it is, preventive measures, how to report it, how to detect it and consequences for committing it.
- All bank and credit card statements should be mailed to the owner and have one designated person do it – if the owner can’t.
- Owners should set an example of ethical and behavioral standards. That will set the tone from the top of what is expected of everyone.
- Require employees to take a vacation. Just knowing they must take a vacation every year is a deterrent because it increases the risk of getting caught.
- Tipster hotline – Set up a system where employees can report suspected theft anonymously. Most detections of employee theft are from a tip.
- System of authorization – Management authorizes employees to execute transactions within limited parameters.
- Safeguard valuable assets and keep an inventory; secure bank check stock, make daily deposits of checks and cash, backup computer records.
- Regular internal and external reviews – Doing financial/accountant reviews may uncover fraudulent activity and areas that need more oversight.
Hiring Employees
Hiring decisions are very important! Put the odds in your favor by improving your approach to finding the candidate who best fits the job opening and company environment.
Download this helpful slideshow that focuses on the interview and selection process in hiring new employees. It covers:
- Getting ready for the interview
- Choosing the interview approach
- Preparing interview questions
- Conducting the interview
- Steps to take after the interview
- Sample testing