Accounting Systems and Internal Control

TL;DR

An accounting system is how a business collects, processes, and reports financial information. Internal controls are the rules and procedures put in place to safeguard assets, ensure accurate data, and promote operational efficiency. Together, they help a business run smoothly, make good decisions, and prevent errors or fraud.

1. The Mental Model

Think of an accounting system as your business's central nervous system, handling all the financial signals. Internal controls are like the healthy habits and safety measures you put in place to keep that system working correctly and safely.

2. The Core Material

An accounting system is essentially a structured way to handle all your business's financial transactions. It takes raw data (like sales receipts or invoices), organizes it, turns it into useful information (like financial statements), and then communicates that information to people who need it.

There are a few main types of accounting systems:

• Manual Systems: You're using paper journals and ledgers, doing calculations by hand. Think small businesses starting out or very simple operations.
• Computerized (Software-based) Systems: This is the most common today. You input transactions into software like QuickBooks, Xero, or SAP. The software automates many tasks, like posting to ledgers and generating reports.
• Enterprise Resource Planning (ERP) Systems: These are comprehensive systems that integrate all aspects of a business, not just accounting. Think large corporations where sales, production, human resources, and accounting all talk to each other.

Regardless of the system type, the goal is always the same: capture economic events, classify them, summarize them, and report them.

Internal controls are the policies and procedures a company uses to:
1. Safeguard assets: Protect cash, inventory, equipment from theft or misuse.
2. Ensure accuracy: Make sure financial records are reliable and complete.
3. Promote operational efficiency: Help the business run smoothly and effectively.
4. Encourage adherence to policies: Ensure employees follow company rules and regulations.

Think of internal controls as a series of checks and balances. The COSO (Committee of Sponsoring Organizations of the Treadway Commission) framework is widely used to organize internal controls into five components:

• Control Environment: The "tone at the top," management's philosophy on controls.
• Risk Assessment: Identifying and analyzing potential risks to the business.
• Control Activities: The specific actions taken to mitigate risks (e.g., segregation of duties).
• Information and Communication: How information is shared, both internally and externally.
• Monitoring Activities: Ongoing evaluations to ensure controls are working effectively.

Types of Control Activities

Photo by Markus Winkler on Pexels

Control activities are the most visible part of internal controls. Here are some key ones:

• Segregation of Duties: This is huge! You don't want one person to have too much control over a process. For example, the person who approves invoices shouldn't be the same person who processes payments. This reduces the risk of fraud or error.
• Authorization: Certain transactions (like large purchases or refunds) require approval from a specific person.
• Reconciliations: Regularly comparing records from different sources to ensure they match (e.g., bank statement to cash ledger).
• Physical Controls: Protecting assets like cash, inventory, or equipment (e.g., safes, locked warehouses, security cameras).
• Performance Reviews: Comparing actual performance to budgets or forecasts.
• Information Processing Controls: Ensuring data entered into systems is accurate and complete (e.g., input validation checks, sequence numbering).

Here's how a typical sales order process might involve both the accounting system and internal controls:

graph TD
    A["Customer Places Order"] --> B["Sales Order Entry (Accounting System Input)"]
    B --> C{{"Check Credit Limit (Control Activity)"}}
    C -- "Approved" --> D["Generate Invoice (Accounting System Output)"]
    C -- "Rejected" --> E["Notify Sales/Customer"]
    D --> F["Ship Goods (Physical Control)"]
    D --> G["Update Accounts Receivable (Accounting System)"]
    G --> H{{"Reconcile A/R to Sales (Control Activity)"}}
    H --> I["Receive Payment"]
    I --> J["Deposit Cash (Physical Control)"]
    J --> K["Update Cash Account (Accounting System)"]
    K --> L{{"Bank Reconciliation (Control Activity)"}}

3. Worked Example

Let's consider a small online t-shirt business, "Trendy Tees Inc.," that uses QuickBooks (a computerized accounting system).

Scenario: Trendy Tees receives an order for 10 t-shirts from a new customer.

1. Sales Order Entry: The customer's order comes in via the website. The system automatically creates a sales order in QuickBooks.
2. Internal Control - Credit Check (Pre-emptive): Since it's a new customer and a larger order, QuickBooks is configured to flag orders over $100 for manual review. The owner, Sarah, quickly checks the customer's payment history (if any) or runs a quick credit check for very large new orders. In this case, it's approved.
3. Invoice Generation: QuickBooks automatically generates an invoice ($250 for 10 shirts) and marks the customer's account as owing this amount (Accounts Receivable).
4. Fulfillment & Shipping: An employee, Mark, prints the packing slip generated by QuickBooks. He picks the t-shirts from inventory.
5. Internal Control - Segregation of Duties: Sarah (owner) processes online payments and handles banking. Mark (employee) picks and packs orders. Neither can complete the entire sales-to-cash process alone, reducing the chance of Mark shipping goods without payment or Sarah recording a sale that never happened.
6. Payment Received: The customer pays online via credit card. The payment processor notifies QuickBooks.
7. Cash Recording: QuickBooks automatically records the cash receipt and reduces the Accounts Receivable balance.
8. Internal Control - Bank Reconciliation (Detective): At the end of the month, Sarah downloads the bank statement and reconciles it with QuickBooks' cash balance. She ensures all online payments processed by the bank match the deposits recorded in QuickBooks. If there's a discrepancy, she investigates. This control helps detect errors or missing deposits.

This example shows how the accounting system handles the flow of transactions, while various internal controls are embedded to ensure accuracy, prevent fraud, and keep operations smooth.

4. Key Takeaways

• An accounting system is the organized structure a business uses to manage and report financial information.
• Internal controls are policies and procedures designed to protect assets, ensure data accuracy, promote efficiency, and encourage compliance.
• Segregation of duties is a crucial internal control where different people handle different parts of a transaction.
• Reconciliations, like comparing bank statements to cash records, are important detective controls to spot discrepancies.
• Physical controls protect tangible assets, such as locking up inventory or cash.
• Effective accounting systems with strong internal controls help businesses make better decisions and prevent fraud or errors.

Common mistakes you should avoid:
- Don't think of accounting systems and internal controls as separate; they work together.
- Don't underestimate the importance of "tone at the top" for a strong control environment.
- Avoid having one person perform all steps in a financial transaction (e.g., ordering, receiving, and paying for supplies).
- Don't ignore small discrepancies during reconciliations; they can be signs of bigger problems.

5. Now Try It

Imagine you're running a small bakery. List three key financial transactions (e.g., buying flour, selling a cake). For each transaction, describe:
1. How you'd handle it with a manual accounting system (what physical documents or records you'd use).
2. One specific internal control you'd implement to safeguard assets or ensure accuracy for that transaction.

Success looks like clearly identifying the accounting step and a relevant, practical internal control for each transaction.