internal control
Internal control is the set of checks a business puts in place so money is not stolen, wasted, or misrecorded before anyone notices.
In plain English
The provision store at the corner of the street has a small notebook chained to the counter, and every single sale gets written into it before the till is touched, because the woman who owns the shop learned the hard way that memory is not an accounting system.
That notebook, small and unglamorous as it looks, is internal control in its purest form. It is the rule that says no money moves without a record, no stock leaves without a note, and no one person handles cash from start to finish without someone else able to check their work.
In a bigger company, this idea grows teeth. A bank in Lagos will not let the same staff member who approves a loan also disburse the cash, because that single split, called separation of duties, is what stops one clever person from calmly approving loans to themselves. A UK retailer will have someone in the warehouse count stock physically every month and compare it against what the computer says should be there, because systems lie less often than people, but they still need checking.
Internal control also covers the boring but powerful stuff, like requiring two signatures on any cheque above a certain amount, or making sure the person who reconciles the bank statement is not the same person who makes the payments. None of it assumes anyone is a thief. It simply assumes that humans make mistakes, get tempted, or get tired, and a good system catches that before the damage is done.
For a Nigerian abroad sending money home through a family business, internal control is the reason you can ask for a monthly statement and actually trust the numbers on it, because someone other than the person spending the money is checking where it went.
A small logistics company in Abuja requires that any expense above ₦50,000 needs approval from two directors and a receipt scanned into the company drive before payment is released. Last quarter, this simple rule caught a fake fuel receipt for ₦180,000 before it was paid, because the second director noticed the vendor did not exist on record.
Questions people ask
Is internal control only for big companies?
No. Even a two person business benefits from simple rules like separating who collects money from who records it, or requiring a receipt for every expense, no matter how small the business is.
Who is responsible for internal control in a company?
Everyone plays a part, but management designs the system and the board, often through an audit committee, checks that it is actually working, more than written down somewhere and ignored.
Does internal control stop all fraud?
No system stops everything, but a strong one makes fraud harder to commit and much easier to catch quickly, which often matters more than preventing it completely.
Last reviewed
