Who's Watching the Money? The One Question Every Board Should Be Asking

Have you ever opened a financial report, stared at three pages of numbers, and thought, “This looks fine… probably”? You are not alone. Boards approve budgets, review audits, and receive monthly reports, but many rarely ask the most important question: Who is independently watching the money day to day? According to the Association of Certified Fraud Examiners, the typical organization loses roughly 5% of its annual revenue to occupational fraud. The schemes responsible are often not elaborate or dramatic. They are simple, familiar, and unnoticed. A payment gets approved without a second review. A bank account is reconciled by the same person who records the transactions. A vendor record changes quietly. A payroll adjustment receives no independent check. Nothing looks unusual until months, or sometimes years, have passed. Fraud does not always require a criminal mastermind. It requires an opportunity nobody is watching closely. For mission-driven organizations, small businesses, nonprofits, and public housing authorities, that opportunity often exists in an oversight blind spot: the person keeping the books is also the person reviewing them. That is not an accusation against a bookkeeper or fee accountant. It is a structural risk. And structural risks deserve structural solutions.

The challenge is especially common in lean organizations. A small business may rely on one trusted employee to enter bills, issue payments, reconcile bank accounts, and prepare financial reports. A nonprofit may have a capable finance manager handling transactions while the board sees only a budget-to-actual report once a quarter. A public housing authority may depend on a small accounting team where staffing limitations make ideal separation of duties difficult. Trust matters, but trust alone is not an internal control. The board’s responsibility is not to assume someone is dishonest; it is to make sure the system does not depend on one person being perfect forever. What happens if an employee makes an honest mistake? What happens if a password is compromised, a vendor sends a fraudulent invoice, or a personal emergency keeps the person with all the financial knowledge away from the office? The question is not, “Do we trust our bookkeeper?” The better question is, “What independent process confirms that the records are complete, accurate, and properly supported?” Boards should be able to see who approves transactions, who records them, who handles cash, who performs reconciliations, and who reviews the final reports. If the answer is always the same name, your organization may have a control gap, even if your books currently look clean.

Here is where a virtual CFO or outsourced Controller can provide an independent set of eyes without the cost of building a full internal finance department. Strong virtual CFO services and outsourced CFO services are not about taking control away from your team. They are about creating a financial intelligence layer that makes responsibility clearer and oversight stronger. That layer can include segregation of duties, monthly bank and balance-sheet reconciliations, review of journal entries, documented approval processes, vendor controls, access reviews, and reports the board can actually question. If your team is too small to separate every duty completely, compensating controls can still reduce risk. For example, an outside finance leader can independently review bank statements, examine unusual transactions, approve payment batches, test reconciliations, and compare actual results with expectations. The goal is not bureaucracy for its own sake. The goal is to make errors and irregularities visible while they are still manageable. A good report should not simply say whether the organization spent more or less than budget. It should explain why, identify what changed, show what needs attention, and give leadership enough context to act. Communication is not just talking. Financial communication means creating information that can be challenged, understood, and trusted, period.

For nonprofits and PHAs, independent financial oversight also protects the mission and the organization’s public responsibilities. Effective nonprofit budgeting is not merely an annual exercise that produces a document for board approval. It should connect program commitments, restricted funds, staffing, cash flow, grants, and operating realities throughout the year. Annual budget planning should establish clear owners, realistic assumptions, and regular variance reviews so leaders can respond before a shortfall becomes a crisis. For a public housing authority, public housing authority accounting requires even more careful attention to program rules, fund activity, procurement, payroll, cash management, and reporting. A virtual CFO for nonprofits or a team providing PHA consulting can help strengthen those processes before deadlines create a once-a-quarter fire drill. Accurate records and timely reconciliations support a cleaner HUD REAC submission and give leadership better information related to PHA PHAS scoring. They also help boards ask better questions: Are expenditures allowable and properly supported? Are restricted funds tracked correctly? Are unusual variances explained? Are grant reports prepared and reviewed by different people? Is the financial information complete enough to support decisions? Oversight should not begin when auditors arrive or when HUD requests clarification. It should be built into the monthly rhythm of the organization.

The board question is simple: Who is watching the money, and who is watching the person watching the money? Asking it does not mean you suspect your staff. It means you understand that good governance is designed, not assumed. Start by mapping the flow of money from authorization to payment, recording, reconciliation, and reporting. Identify where one person controls too many steps. Then add practical safeguards: independent review, documented procedures, timely reconciliations, dual approvals where appropriate, clear reporting, and regular conversations about risk. Your fee accountant, bookkeeper, or internal finance team may be doing excellent work; an outsourced Controller or virtual CFO can help ensure that excellent work is independently reviewed and connected to board-level decision-making. The result is more than fraud prevention. It is financial clarity, accountability, and trust: the foundation every growing business, nonprofit, and public housing authority needs. You do not need a fortress made of paperwork. You need a system where important activity is visible, explainable, and reviewed before small problems become expensive ones. Procuris Consulting helps mission-driven organizations build that financial intelligence layer so their boards can stop asking, “Does everything look okay?” and start asking the questions that truly protect the mission.