Small Business Accounting Controls When One Person Does the Books

Small businesses rarely have a separate person for every accounting task. The same employee may enter bills, prepare payments, post customer receipts and reconcile the bank account. That can be efficient, but it also creates a blind spot: one mistake can pass through the entire process without an independent check.

The answer is not necessarily to hire a larger accounting department. It is to identify the decisions that deserve independent approval and build a review routine that the owner can actually maintain.

Start with the riskiest combinations

List who can create vendors, change payment details, approve invoices, release payments, record transactions and reconcile accounts. The highest-risk situation is when the same person can initiate, authorize, record and conceal a transaction without another person seeing evidence. Smaller teams can reduce this risk through independent owner review, even when complete separation is impractical.

Five controls that fit a small team

1. Require a second approval for vendor bank changes. Verify new details using a previously established contact method, not the phone number included in a change request. Keep the approval and verification record.
2. Separate bill preparation from payment release. A bookkeeper can enter invoices and assemble a proposed payment list while the owner approves and releases funds directly through the bank.
3. Review the bank reconciliation. Compare the reconciled balance to the statement, inspect old outstanding items and investigate unexplained adjustments. An owner should review and date the reconciliation when the preparer also posts transactions.
4. Review credits, refunds and write-offs. Require an explanation and approval for unusual customer credits, refunds, vendor credits and bad debt write-offs. Look for repeated adjustments to the same account.
5. Limit access and review changes. Grant only the permissions needed for each role, remove former users promptly and periodically review vendor master changes and audit logs where the system supports them.

A practical monthly review

Set aside 30 to 45 minutes after the month closes. Review the bank reconciliation and cash movement, scan the vendor payment list for unfamiliar names or changed instructions, examine unusually large or round-dollar journal entries, compare aged receivables and payables with prior months, and sign off on exceptions. The time needed varies with transaction volume and complexity.

Keep a short exceptions log with the issue, amount, owner, action and resolution date. If the same issue repeats, change the process instead of simply correcting another entry.

Worked example: one bookkeeper, one owner

Suppose a landscaping company has one part-time bookkeeper. The bookkeeper receives invoices, checks that the work was performed, enters bills and prepares a weekly payment batch. The owner independently reviews the batch against supporting invoices and releases the payments. At month end, the bookkeeper reconciles the bank, and the owner compares the reconciliation to the statement and investigates outstanding items. Neither review guarantees that every error or fraud will be caught, but each adds a meaningful check without requiring a second full-time accounting hire.

What to document

• Who may add or change vendors and bank instructions.
• Who approves purchases, payments, refunds and write-offs, including dollar thresholds.
• Who prepares and reviews each monthly reconciliation.
• How exceptions are tracked and resolved.
• How access is granted, reviewed and removed.

What independent review cannot replace

Owner review is not a substitute for accurate records, appropriate access security or professional advice on material accounting and regulatory matters. Controls should reflect the company's actual risk, size, payment methods and reporting obligations. A control that is never performed or documented is less useful than a simpler control consistently followed.

University guidance

Florida Atlantic University, Elements of Effective Internal Controls for University Operations, emphasizes documented reconciliations, timely investigation and separation of transaction processing from review. These principles inform this article, but university procedures are not presented as legal requirements for private small businesses. The small-business workflow and example above are original Summer Peaks guidance.

Summer Peaks can manage ongoing bookkeeping, accounts payable, receivables, reconciliations, reporting or a defined accounting controls review. Businesses can hire us for a single function or a broader accounting relationship. All work stays in the United States.