One-Person Accounting Office and a Suspicious Vendor
A small town with an $8 million annual budget has one accounting clerk who opens the mail, prepares deposits, records cash receipts, reconciles the bank statement, processes accounts payable, and maintains the vendor master file. The town manager signs checks, and the elected treasurer reviews and signs the monthly bank reconciliation. There is no internal audit function. During a surprise review, the treasurer finds a $45,000 payment to a vendor with a post-office box and no phone number. The clerk says the vendor was added by the town manager. The town manager is on vacation.
1. Identify the internal control weaknesses and fraud risks in the town's cash receipts and disbursements process.
Read the worked answer
The central weakness is lack of segregation of duties. One clerk opens the mail, deposits cash, records receipts, reconciles the bank statement, processes payables, and controls the vendor master. That combination allows the clerk to steal receipts, create fictitious vendors, approve or prepare payments, and conceal the results in the reconciliation. The town manager's check-signing is not an effective control if the clerk prepares the supporting voucher and the manager does not independently verify the vendor and receipt of goods. The treasurer's review of a reconciliation prepared by the clerk may be superficial. The $45,000 payment to a post-office-box vendor with no phone number is a red flag for a fictitious vendor, related-party transaction, or management override. Because the clerk says the manager added the vendor, the manager must not control the investigation. The town also lacks an internal audit or independent review function.
2. Recommend immediate and long-term controls, including how to handle the suspicious payment and the manager's involvement.
Read the worked answer
Immediately, the town should stop payment if the check has not cleared, preserve all records, notify the bank, and contact the treasurer, governing body, and town attorney. The clerk should be removed from cash receipting, vendor maintenance, and reconciliation during the review. The manager should recuse from the investigation because he is implicated; the governing body or an audit committee should direct an independent review, possibly a forensic audit. Long term, the town should separate receipting, depositing, recording, reconciling, vendor maintenance, and disbursement. It should require independent bank reconciliations by the treasurer or an outside preparer, dual authorization for new vendors, vendor validation, three-way matching before payment, positive pay, prenumbered receipts, mandatory vacations, surprise audits, and a whistleblower hotline. Because the town is small, it may need compensating controls such as governing-body review of bank statements and vendor listings. The board should also adopt a fraud policy and enforce a strong tone at the top.