The Six-Person Finance Office
A small town with six full-time finance employees has one accountant who prepares journal entries, reconciles the general ledger bank account, and has administrator rights in the financial system. The finance director approves the entries and signs checks but also uses a town credit card for travel and small purchases. In the most recent audit, the auditor found that 11 of 30 credit-card transactions lacked itemized receipts, including a $450 charge at a hotel for a conference the director attended. The director says the receipt was lost and the conference agenda supports the charge. The town has no written credit-card policy, no independent review of credit-card statements, and no formal process for reconciling vendor master file changes. The town council is small and volunteer; the clerk-treasurer is elected and part-time. The auditor issued a significant deficiency and recommended that the town strengthen segregation of duties and documentation. The town manager asks the finance director to draft a corrective action plan within two weeks, but the finance director is also the subject of the credit-card finding.
1. Which control weaknesses are most serious, and why?
Read the worked answer
The most serious is the reconciliation conflict: the same accountant prepares journal entries, reconciles the bank account, and has system administrator rights. That combination lets one person record and conceal a fraudulent entry. Second is the director's self-approved credit-card use with missing receipts; even if the $450 hotel charge is legitimate, the absence of itemized support and independent review creates both fraud risk and audit exposure. Third is the lack of vendor master file controls, which enables fictitious vendors. The auditor's significant deficiency is appropriate because these are not minor documentation issues; they strike at segregation and management review. The finance director's dual role as subject of the finding and author of the corrective plan is itself a conflict.
2. Design compensating controls that a six-person town can actually implement.
Read the worked answer
Use cost-effective external checks. A council member or the clerk-treasurer should review bank statements and canceled checks monthly against the approved bill list. An outside accountant should review journal entries quarterly. The credit-card statement should be reviewed by the town manager or council finance committee, with itemized receipts required before reimbursement; set card limits and prohibit cash advances. Split system rights: the accountant may prepare entries but not post to the general ledger; the director posts after review; vendor master changes require two approvals. Use pre-numbered forms, a check log, and monthly budget-to-actual review. Document who performs each control. In a small office, management review is the main compensating control, so the reviewer must be independent of the preparer. The council should adopt a written credit-card and conflict-of-interest policy.
3. How should the finance director handle the conflict in drafting the corrective action plan?
Read the worked answer
Disclose the conflict in writing and step back from investigating or drafting the portion that concerns her own credit-card use. The town manager or council finance committee should lead that part, with the auditor or outside counsel reviewing. She can provide factual records and draft operational controls for the accounting system, but she should not approve the final plan or sign off on her own compliance. If the council directs her to draft the whole plan, she should document the direction and have an independent reviewer sign off. This protects the town and her: a plan seen as self-policing may be rejected by the auditor and weaken the town's position. The council should set a deadline and monitor implementation.