Six Components of Good Internal Control Systems for Smaller Entities | AccountingWEB

Six Components of Good Internal Control Systems for Smaller Entities

Some of us were taught that internal control for smaller entities was an oxymoron. My supervisors made it clear that, because segregation of incompatible duties was not usually possible for smaller entities, internal control was non-existent.  In 2006, COSO changed the rules by publishing Internal Control over Financial Reporting — Guidance for Smaller Public Companies and recognizing there are different rules for larger and smaller entities.

Essentially, COSO said internal controls for smaller entities are more likely to be informal and carried out by one or a few persons.  COSO’s guidance, audit standards from the PCAOB and AICPA attestation standards all require a top-down approach whenever considering internal controls.  One or a few management persons performing control procedures (top-down) can produce a good internal control system for a smaller entity!

Control procedures consist of entity-level and activity-level controls. For smaller entities, public or non-public, the design of control procedures should focus primarily on the entity-level (top-down) since the activity-level controls may be ineffective due to a lack of segregation of duties.  Entity-level controls are the key controls for smaller entities and are the most effective for preventing errors or fraud from occurring and going undetected.  If entity-level controls are properly designed, and if they are diligently performed by management and/or persons charged with governance, a small entity can have a good internal control system.  This can be true even for an entity with only two or three accounting personnel!

Here are six components of a good internal control system for smaller entities:

1)    Management personnel should have high integrity and ethical values and be committed to diligently performing key internal control procedures.  For a smaller entity, management’s character shapes the control environment.
2)    Boards of governance should have more “hands-on” oversight involvement in the entity’s activities.  Some board members may even perform monthly entity-level controls such as inspecting and approving supporting documentation for checks written.
3)    Key controls performed by management personnel can overcome the lack of segregation of duties.  COSO suggests reviews of accounting systems reports, inspections of supporting documents for selected transactions, overseeing periodic counts of inventories and reviewing bank statement and other reconciliations.
4)    An IT system that limits risks of errors or fraud can produce better and more accurate financial reports.  Standardized reporting formats, password and processing controls and other application controls should be included in accounting software.
5)    Monitoring control activities are primarily the responsibility of management.  Smaller entities’ management should be performing daily “walk-around” controls that provide feedback on the effectiveness of accounting, internal control and operational systems.
6)    The system of internal control should maximize effectiveness and efficiency by including activities that are tailored to the nature, size and complexity of the entity.  Since policies and procedures are usually informal for smaller entities, management personnel should communicate internal controls through frequent contact with accounting personnel.  The performance of basic activity-level control procedures, such as determining that all shipments are billed, that invoices are initiated only after shipments are made and that bank accounts are reconciled timely, should documented in the accounting records for periodic management inspection.

Will these internal controls prevent all errors or fraud from occurring and going undetected?  Certainly not!  They will ordinarily, however, accomplish management’s control objective of providing reasonable assurance an entity’s financial reporting process is accurate.

If you are interested in digging deeper into this subject, you may wish to register for my live webcast entitled, Designing Internal Control Systems for Small Entities.  By clicking on the Live Webcasts box on the homepage of my website,, you can download a syllabus and register.  Come have some fun with me!


This blog

by Larry Perry, CPA, CPA Firm Support Services, LLC - Larry has over 40 years experience as a CPA practitioner, author of accounting and auditing manuals, author and presenter of live staff training seminars and author of webcast and self-study CPE programs.  He is co-founder of CPA Firm Support Services, LLC (, an organization providing resources, training and consulting to smaller CPA firms.  Larry writes a weekly blog on focusing on small audits, reviews and compilations.  He is currently developing documentation manuals and handbooks for small audits, reviews and compilations and related electronic practice aids.

More from this blog

Bloggers crew

Steve Knowles has spent 25 years in business and practice in the UK, but he also worked in the states and the years haven't dulled his way of seeing an alternative view to everyone else, and every day is a new adventure.


Joel M. Ungar, CPA is a lifelong resident of the Detroit area and a graduate of The University of Michigan. He is a principal with Silberstein Ungar, PLLC, a Top 15 auditor of SEC public reporting companies.


Allan Boress, CPA, with over 25 years as a practitioner and consultant to the accounting profession. Mr. Boress is the author of 12 published books in 6 different languages, including a best-seller, The "I-Hate-Selling" Book.


Larry Perry, CPA, CPA Firm Support Services, LLC, is the author of accounting and auditing manuals, author and presenter of live staff training seminars, and author of webcast and self-study CPE programs. He blogs about small audits, reviews, and compilations.

Sandra Wiley, COO and Shareholder, is ranked by Accounting Today as one of the 100 Most Influential People in Accounting as a result of her prominent role as an industry expert on HR and training as well as influence as a management and planning consultant. She is also a founding member of The CPA Consultant's Alliance. Sandra is a certified Kolbe™ trainer who advises firms on building balanced teams, managing employee conflict and hiring staff.

Maria Calabrese, CIR, Human Resources manager for Fazio, Mannuzza, Roche, Tankel, LaPilusa, LLC in Cranford, New Jersey, Maria's topics revolve around the world of: Mentoring, Performance management, and The "Y Generation," a.k.a. "The whY generation".


William Brighenti is a CPA, Certified QuickBooks ProAdvisor, and Certified [Business] Valuation Analyst, operating an accounting, tax, and QuickBooks consulting firm in Hartford, Connecticut, Accountants CPA Hartford.


Ken Garen, CPA, is the co-founder and President of Universal Business Computing Company (, a software development firm of high-volume, high-productivity accounting and payroll technology.


Eva Rosenberg, MBA, EA, is the publisher of, and author of the weekly syndicated Ask TaxMama column. She provides answers to tax questions from taxpayers and tax professionals worldwide.


Amy Vetter, CPA, CITP is the CPA Programs Leader for Intacct Corporation responsible for leading the CPA/BPO Partners nationally.

Brian Strahle is the owner of LEVERAGE SALT, LLC where he provides state and local tax technical services to accounting firms, law firms and tax research organizations across the United States. He also writes a weekly column in Tax Analysts State tax Notes entitled, "The SALT Effect." For more info, visit his website:
Scott H. Cytron, ABC, is president of Cytron and Company, known for helping companies and organizations improve their bottom line through a hybrid of strategic public relations, communications, marketing programs and top-notch client service. An accredited consultant, Scott works with companies, organizations and individuals in professional services (accounting, finance, medical, legal, engineering), high-tech and B2B/B2C product/service sales.

Rita Keller is a nationally known CPA firm management consultant, speaker, author, mentor and blogger. She has over 30 years hands-on experience in CPA firm management, marketing, technology and administrative operations.

Stacy Kildal is the mom of two fantastic kids, an Advanced Certified QuickBooks ProAdvisor, Certified Enterprise Solutions ProAdvisor, Sleeter Group Certified Consultant, a nationally recognized member of the Intuit Trainer and Writer Network, and co-host of RadioFree QuickBooks.
Michael Alter's blog specializes in providing practical advice to those who seek greater profitability and practice management tactics that enhance deeper client relationships.

Sally Glick, CMO, Principal, Marketer of the Year in 2003 and AAM Hall of Famer in 2007, leads a lively discussion of the constantly expanding roles of marketing and the professional marketers that drive this initiative in accounting firms of all sizes.


The IMA Young Professionals Blog features the insights of IMA’s Young Professionals Committee. Committee members share advice and experiences on careers, continuing education, work/life balance, and other issues affecting young accounting and finance professionals.


FEI Financial Reporting Blog provides highlights from SEC, PCAOB, FASB, IASB, and other regulatory news, including reporting under Sarbanes-Oxley Sect 404. It is written by Edith Orenstein, Director of Technical Policy Analysis at FEI.


Sue Anderson has 30 years of experience in continuing education for accountants. Currently she is the program director for online CPE provider CPE Link.


Jim Fahey is COO of Apple Growth Partners, a regional CPA firm in Ohio. His focus is on the effective and efficient use of technology within the firm by all team members.

Caleb Newquist is the Editor-in-Chief of Sift Media US, overseeing content for both AccountingWEB and Going Concern.

Leita Hart-Fanta, CPA, CGFM, and CGAP is the author of "The Yellow Book Interpreted" and owner of a website devoted to training for governmental auditors.


AccountingWEB is more than just a U.S. team of journalists and financial and technology experts - we have an international side, too! Members of our British team who publish share their ideas, insights, and perspectives from across the pond.