Weak Controls Hinder Philippine Business Efficiency

Philippine businesses, especially small and medium-sized enterprises (SMEs), often struggle with weak internal controls. This lack of strong controls leads to inefficiencies, increased risks of fraud, and ultimately, hinders growth. Let’s dive into why this is happening and how businesses can do better.

What are Internal Controls and Why Do They Matter?

Imagine internal controls as the rules of the game for your business. They are the processes and procedures put in place to ensure your business is running smoothly, efficiently, and ethically. They help you make sure assets are protected, financial information is accurate, and everyone is following the rules. A strong system of internal controls is like having a great referee making sure everything runs by the book.

Internal controls matter because they help protect businesses from all sorts of risks: fraud, errors, and non-compliance with regulations. Without these controls, money can go missing, mistakes can happen, and you could face legal trouble. Plus, good internal controls build trust with customers, investors, and employees, leading to a stronger and more sustainable business.

Common Examples of Weak Internal Controls in the Philippines

Unfortunately, many Philippine businesses suffer from weak internal controls. This isn’t about pointing fingers, but understanding the problems to find solutions. Here are a few examples:

• Poor Segregation of Duties: This means one person has too much control over a process. For example, the same person might be responsible for approving invoices, making payments, and reconciling bank statements. This makes it easy for fraud or errors to go unnoticed. Imagine giving one person all the roles in a basketball team – the player, the coach, and the referee! It just doesn’t work.
• Lack of Documentation: When transactions aren’t properly documented, it’s hard to track what happened and who was involved. This can happen when you’re operating on trust with staff instead of documentation, which is a recipe for disaster especially since trust is not a control. Let’s say someone makes a sale but doesn’t create an invoice or receipt – how do you know the money made it to the bank?
• Weak IT Security: In today’s digital world, weak IT security is a major threat. This includes things like using weak passwords, not updating software regularly, and not having proper firewalls. This leaves businesses vulnerable to cyberattacks and data breaches. Think of it like leaving your house unlocked – anyone can walk in and take what they want.
• Insufficient Monitoring: Simply having controls in place isn’t enough. You need to regularly monitor them to make sure they’re working effectively. Are people actually following the procedures? Are the controls preventing errors and fraud? Without monitoring, your controls might as well not exist.
• No Regular Audits: Regular audits can help identify weaknesses in internal controls and ensure compliance with regulations. This is especially important for detecting fraudulent activities. Many small businesses skip on this step thinking audits are too expensive, not realizing that investing in a good audit is investing in the future of the company

Why are These Weak Controls So Common?

There are several reasons why weak internal controls are so common in the Philippines:

• Lack of Resources: Many SMEs simply don’t have the financial resources or expertise to implement robust internal controls. Setting up and maintaining these controls can be costly. The Philippines has a predominantly SME economy, wherein most business owners consider it impractical to invest in internal controls.
• Cultural Factors: Sometimes, cultural factors like a high level of trust or a reluctance to question authority can contribute to weak controls. People might be hesitant to report suspicious activity or challenge decisions made by superiors. There’s also a cultural tendency to avoid conflict which can cause employees to let things slide in their companies.
• Lack of Awareness: Some business owners simply aren’t aware of the importance of internal controls or how to implement them effectively. They may be focused on other aspects of the business, like sales and marketing, and neglect the importance of risk management and financial oversight.

Follow us on LinkedIn!



• Informality: A lot of Philippine businesses, especially smaller ones, operate in a very informal way. This can mean a lack of written policies and procedures, reliance on verbal agreements, and a general lack of structure. Informality is the enemy of internal controls.
• Rapid Growth: Businesses that are growing rapidly may struggle to keep up with the need for stronger internal controls. As a business grows, it becomes more complex, and the risks increase. But unfortunately, most SMEs often fail to invest in internal controls as they scale.

The Negative Impact of Weak Controls

Weak internal controls can have a devastating impact on Philippine businesses. Here are some of the consequences:

• Financial Loss: Fraud, errors, and theft can lead to significant financial losses. This can be especially damaging for smaller businesses that may not have the resources to recover from these losses. The Association of Certified Fraud Examiners (ACFE) conducted a study and reported that organizations lose an estimated 5% of revenue to fraud each year, so the risk is real and companies should take this more seriously.
• Reputational Damage: Scandals involving fraud or unethical behavior can severely damage a company’s reputation. This can lead to a loss of customers, investors, and employees making it difficult to recover.
• Compliance Issues: Failure to comply with regulations can result in fines, penalties, and even legal action. This is something businesses need to avoid at absolutely all costs by keeping updated with the latest government policies.
• Inefficiency: Weak controls can lead to inefficiencies in business operations. For example, if inventory isn’t properly managed, a business might end up with too much or too little stock, leading to lost sales or increased costs.
• Difficulty Obtaining Financing: Lenders and investors are often hesitant to provide financing to businesses with weak internal controls because if their business operations are not safeguarded appropriately, there’s a higher risk that the business won’t repay its debts.

How to Strengthen Internal Controls in Your Business

The good news is that strengthening internal controls doesn’t have to be complicated or expensive. Here are some practical steps you can take:

• Start with a Risk Assessment: Identify the areas of your business that are most vulnerable to risk. What are the things that could go wrong? This could include anything from theft and fraud to errors in financial reporting and non-compliance with regulations. Take note that every business has different levels of risk exposure.
• Implement Segregation of Duties: Make sure that no one person has too much control over a process. Divide responsibilities so that one person’s work is checked by another. For example, the person who approves invoices shouldn’t also be the person who makes payments. Segregation of duties is always better than relying on trust alone.
• Document Everything: Create written policies and procedures for all key business processes. This provides a clear guide for employees to follow and makes it easier to track transactions. Make sure that employees familiarize themselves with these policies from time to time.
• Strengthen IT Security: Use strong passwords, update software regularly, and install firewalls to protect your business from cyberattacks. Train employees on how to recognize and avoid phishing scams and other online threats. It may be best to get professional help in setting up IT Security; many IT companies in Manila should have this specialized service.
• Monitor Controls Regularly: Regularly review your internal controls to make sure they’re working effectively. This could involve spot checks, audits, or simply observing how employees are performing their tasks.

Follow us on LinkedIn!



• Implement Fraud Detection Measures: Implement measures to detect fraud, such as whistleblowing hotlines and data analytics tools. Encourage employees to report suspicious activity without fear of retaliation. A whistleblowing hotline is designed as an anonymous channel, assuring those with information that they are protected from revenge when reporting possible corrupt activities in the company.
• Provide Training: Make sure employees are properly trained on internal controls and ethical behavior. This will help them understand the importance of following procedures and reporting suspicious activity.
• Seek Professional Advice: If you’re unsure where to start, consult with a qualified accountant or internal control specialist. They can help you assess your risks and develop a customized plan to strengthen your controls. A good CPA can give valuable insights and also has a fresh perspective on your company.

Real-World Example: Streamlining Procurement in a Manufacturing Company

Let’s say a small manufacturing company in Cebu struggles with inefficient procurement processes. Purchasing requests were often made verbally; approvals were inconsistent, and there was no formal bidding process. This led to higher costs, delays, and a risk of favoritism when choosing suppliers. The company implemented the following changes:

1. Formalized purchasing requests: All purchases must now be made using a standardized purchase request form, approved by a designated manager based on budget limits.
2. Implemented a three-bid process: For purchases above a certain threshold, at least three suppliers must be contacted for quotes.
3. Created a vendor database: A database of approved vendors was created to improve transparency and reduce the risk of dealing with unreliable suppliers.
4. Established clear approval workflows: A clear workflow was established for approving purchases, ensuring that all purchases were properly authorized and documented.

These changes resulted in lower procurement costs, faster turnaround times, and greater transparency in the procurement process. This is how a little tightening of the system can bring about improvements in the company’s efficiency.

The Role of Technology in Strengthening Controls

Technology can play a huge role in strengthening internal controls. Here are some examples:

• Accounting Software: Accounting software like Xero or QuickBooks can automate many accounting tasks, reducing the risk of errors and fraud. These platforms also provide features like audit trails, which make it easier to track transactions and identify potential problems.
• Inventory Management Systems: Inventory management systems can help businesses track inventory levels, prevent stockouts, and reduce the risk of theft and spoilage. Automation is key to preventing mistakes.
• CRM systems: CRM (Customer Relationship Management) helps automate sales transactions. Manual transactions can be vulnerable to errors and fraud if not properly monitored.
• Data Analytics Tools: Data analytics tools can be used to identify patterns and anomalies that might indicate fraud or other problems. For example, you could use data analytics to identify unusual transactions or customers who are consistently late with payments.
• Cloud Storage: Storing data in the cloud can improve data security and accessibility. Cloud storage providers typically offer features like encryption ad access controls, which can help protect sensitive information.

Overcoming the Challenges of Implementation

Implementing stronger internal controls can be challenging, especially for SMEs with limited resources. Here are some tips for overcoming these challenges:

• Start Small: You don’t have to overhaul your entire internal control system overnight. Start by addressing the most critical risks and gradually implement more controls over time.
• Focus on Simplicity: Keep your internal controls as simple and straight forward as possible. The more complex your controls are, the harder they will be to implement and maintain.
• Get Employee Buy-In: Explain to employees why internal controls are important and how they benefit the business. This will help them understand the need for change and be more willing to follow procedures.
• Lead by Example: Set a positive tone at the top by demonstrating a commitment to ethical behavior and compliance. This will send a message to employees that internal controls are important and worth following.

Looking Ahead: The Future of Internal Controls in the Philippines

As the Philippine economy continues to grow, the need for stronger internal controls will only become more important. Businesses that invest in robust internal control systems will be better positioned to manage risks, improve efficiency, and achieve sustainable growth. As technology continues to evolve, businesses will need to adapt their internal controls to address new and emerging threats.

The government also plays a critical role in promoting good governance and encouraging businesses to adopt stronger internal controls. This could involve providing training and resources to SMEs, enforcing regulations more effectively, the key is to set up checks and balances.

FAQ Section

What is the difference between internal control and internal audit? Internal control is the system, policies, and procedures that the company sets up to safeguard the company assets. Whereas, internal audit is a function that evaluates the effectiveness of the internal controls implemented in the organization. Internal audit makes recommendations on how to improve existing controls.

Are internal controls only for big corporations? No, but internal controls are applicable to businesses of all sizes. SMEs may think that internal controls are expensive, but there are simple and cost-effective control measures they can implement to safeguard their business operations.

How often should internal controls be reviewed? Ideally, internal controls should be reviewed at least annually, or more frequently if there are significant changes in the business environment or operations such as introduction of new products or services. The goal is to make it more responsive to changing business needs.

What are the types of internal controls? Internal controls are classified into the following types: Preventive, Detective, Corrective, and Directive. These are all designed to make sure your business is running smoothly, ethically, and efficiently!

Who is responsible for internal controls? It is everyone’s responsibility but ultimately, management is accountable for implementing and maintaning an internal controls. Every employee plays a part in ensuring risks are mitigated and financial data is safeguarded.

References

1. Association of Certified Fraud Examiners (ACFE). Report to the Nations: 2022 Global Study on Occupational Fraud and Abuse.
2. COSO. (2013). Internal Control – Integrated Framework.
3. Philippine Institute of Certified Public Accountants (PICPA).

Ready to take your business to the next level? Don’t let weak internal controls hold you back. Start by assessing your risks, implementing some basic controls, and training your employees. You might think you don’t have the time or money, but investing in internal controls is an investment in the future of your business. It reduces the risk of potentially devastating financial loss and ensures the company will continue to grow. You’ve got this!