Understand Segregation of Duties and How to Create It

segregation of duties

What is segregation of duties and how can you achieve it? In this post, I answer these two questions. Iโ€™ve seen business owners, nonprofits, and governments lose millions because they did not understand the risk of not having sufficient segregation of duties. For instance, $53 million was stolen by Rita Crundwell because the City of Dixon did not have this safeguard. So, you can stop reading now, but you would be wise to continue.

What is segregation of duties?

Itโ€™s the performance of different accounting processes by different people. 

Why is this important?

It makes it more challenging for someone to steal. When more eyes ๐Ÿ‘€ are on the accounting processes, itโ€™s more likely theft will be seen (if it occurs). And most potential fraudsters donโ€™t want to go to jail, so fraud decreases.

one person accounting

One-person accounting system

Suppose there is only one person in accounting (weโ€™ll call him Bob). Bob performs all duties, including the following for accounts payable:

โ€”receiving vendor invoices, 

โ€”signing checks (or making electronic payments), 

โ€”entering transactions in the general ledger, 

โ€”reconciling the bank statements, 

โ€”adding new vendors to the account payable module

Bob is the poster child of a lack of segregation of duties. To make matters worse, no one is reviewing his work, and he is not providing any reports to anyone (such as the owners). 

Can Bob steal without detection? Absolutely. 

two person accounting

Lessening Theft with Segregation of Duties

How can this business lessen theft?

Add more people (more eyes ๐Ÿ‘€) to accounting. 

For example, Bob could enter invoices and tee up payments, but Sally approves them (e.g., signs the checks or pulls the trigger on the electronic payments). Sallyโ€™s approval involves her review of each invoice for appropriateness. In this setup, Sally has no rights to enter invoices, no rights to the general ledger, other than viewing. And the computer will not process payments without Sallyโ€™s approval. In other words, it takes Bob and Sally to make a payment.

We now have the following segregation:

Bookkeeping โ€” Bob

Approval – Sally

So, by adding one person to the accounts payable process, we have lowered the theft potential. Weโ€™ve created some segregation of duties. It may not be perfect, but the threat of theft is less.

Canโ€™t Afford to Hire Sally

If this is a small business, the owner may not have the money to hire Sally.

What can be done?

Have the owner review documents such as:

โ€”Bank reconciliations (and the cleared checks showing who was paid)

โ€”Monthly budget to actual reports showing the budgeted revenues and expenses and actual amounts

โ€”General ledger (the owner can scan the general ledger detail for appropriateness)

What have we done? Weโ€™ve added more eyes ๐Ÿ‘€ to the process. Why? We need this safeguard due to the lack of segregation of duties.

segregation of duties

Accounting Processes

Accounting processes include:

  • 1. Custody of assets
  • 2. Reconciliations
  • 3. Approvals
  • 4. Bookkeeping 

It is desirable to segregate each of these accounting processes for each accounting area such as:

โ€”Billing and collections

โ€”Accounts payable and expenses

โ€”Payroll

โ€”Plant, property, and equipment

โ€”Inventory

Reviews as an Internal Control

If segregation of duties is not possible, include a review process of some type such that a potential fraudster will know another person will see what they do. 

Reviews can be performed by (these are just examples):

โ€”an owner

โ€”an outside CPA (maybe once or twice a year, for example)

โ€”the ownerโ€™s spouse

โ€”the controller of another entity that the owner controls

Of course, you can also require an audit of the entity (more eyes ๐Ÿ‘€ ) at year-end. 

So, should auditors report a lack of segregation of duties to the business owners and board members?

Auditor Reporting

Auditors should report a lack of segregation of duties to the owners and board members. This communication will normally be in writing, especially if the control weakness is in an area where material theft can occur. 

Should the auditor communicate the lack of segregation of duties if he or she knows the owners and board members are already aware of the internal control weakness (say, youโ€™ve communicated this in previous years)?

Yes. 

Summary

More eyes on the accounting processes will lower the risk of theft. Do what you can now to create proper segregation of duties and prevent financial losses.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.