Skip to content
Manager guide

Keeping the books honest

The internal controls that protect a utility's money, and the clerk trusted to handle it, when staff is too thin to separate every task.

July 2026
Business & Governance
All
6
The short answer

When one clerk receives, records, and deposits every payment alone, nobody can prove anything went wrong, even when nothing did. Internal controls split those tasks across more than one person, or add compensating steps like two signatures and monthly board review when staff is too thin to split fully. A first audit checks for exactly that: separated duties, original invoices marked paid, bonded staff, and reconciled bank statements. The payoff cuts both ways. These habits protect the utility's cash and protect the clerk from being the only person who can be blamed.

What you will be able to do

You hired one person to answer the phone, take the payment, log it, and walk the deposit to the bank. That person has been with you for years. You trust them completely, and you should.

The problem isn't the person. It's the setup.

When one employee handles every step, cash taken, cash recorded, cash deposited, nobody can prove anything went wrong. That holds true even when nothing did. A customer disputes a payment. A deposit comes up short by a few dollars.

A board member asks who counted the drawer. If one person controls the whole loop, there's no second set of eyes anywhere in it. The clerk who handles your money every day is the one left holding an accusation nobody can disprove.

Rung 4 of the manager track.

Internal controls fix that gap. They aren't built on the assumption that your staff will steal. They're built so an honest employee can never be blamed for something a record can clear them of.

What separation of duties actually means

Separation of duties means splitting the jobs of receiving, recording, depositing, and spending money among more than one person. No single employee controls a transaction from start to finish. The classic failure: one clerk takes the check, logs it, and drives the deposit to the bank alone. If a deposit comes up short, or a customer disputes paying, nobody can reconstruct what happened.

This doesn't require a big staff. It requires putting at least two different people in different links of the chain. One person collects and logs payments.

A different person makes the deposit. A third, which can be a board member, checks the monthly report against the bank statement. Even a two-person office can split "record" from "deposit."

When one person really has to do it all

Plenty of small systems run on one clerk, full stop. When you can't split every duty across separate employees, compensating controls fill the gap instead.

  • The board, or one assigned member, checks the bank statement and deposit records monthly, not just the budget numbers.
  • Every disbursement carries two signatures, so the clerk who pays a bill isn't the only person who approved it.
  • Deposits go to the bank the same day, in full, so a shortfall can't sit unnoticed for weeks.
  • Every invoice is paid from the original document, marked paid and initialed, so nobody pays it twice.

The most useful ones for a one-person office:

None of these require hiring anyone. They require the board treating financial oversight as a standing habit, not something the clerk handles alone. They trade blind trust for a paper trail. That paper trail protects the clerk as much as the utility.

What a first audit looks for

A first audit isn't hunting for a crime. It checks whether the utility handles money the way any well-run organization does, and whether the records can prove it.

An auditor walking into a small utility for the first time typically checks a short list. Does the same person receive, record, and deposit payments, or are those split? Do disbursements carry a second signature and trace back to an original invoice?

Does someone other than the check-writer reconcile the bank statement every month? Does petty cash have a set limit and a log? Is anyone with access to utility funds bonded against loss?

A "no, it's all one person" answer isn't automatically a violation. It's a finding, a gap the board is expected to close with a written plan. What damages a utility's credibility is ignoring the finding, or failing to explain a number that moved year over year.

Controls on the spending side too

Every control so far protects money coming in. The same principle applies going out. A single clerk who decides what to buy, orders it, and approves the invoice has the same blind spot. It's the same gap as one person who receives, records, and deposits a payment alone.

The fix is proportional to the size of the purchase. Small, routine purchases, office supplies, a monthly service bill, don't need a formal process. Larger purchases benefit from a written rule.

Get a couple of quotes before committing, and get board sign-off above a threshold the board sets itself. The biggest purchases deserve competitive bids from more than one vendor, documented in writing, before anyone signs anything.

Two more habits close common gaps. If a board member or employee has a financial interest in a vendor, disclose it before the purchase happens, not after. And if a purchase happens as a true emergency, without time for quotes, write down why within a day or two.

Do it while the reason is still fresh. That way the exception doesn't quietly become the rule.

The paper trail that protects the clerk

Here's the part that gets missed. Separation of duties is not primarily a tool to catch a dishonest employee. Most small-utility clerks are honest for their entire careers. The controls exist because an honest clerk, working alone, has no way to defend themselves.

A customer disputes a payment. A bank error shorts a deposit. A board member asks a pointed question at the wrong moment.

A clerk who logs every payment the day it arrives has a record that speaks for them. So does a clerk who deposits it intact the same day. So does a clerk who hands a monthly reconciliation to someone else to check.

A clerk who is the only person who ever touches the money has nothing but their word. That word isn't something a board, a lender, or a state examiner can accept on faith. Good controls let a board tell a worried clerk, truthfully, that they're covered no matter what gets questioned later.

Fidelity bond coverage works the same way in reverse. It's insurance that reimburses the utility if an employee with access to funds causes a loss. That protects the system. It also means nobody has to publicly accuse an employee while a question gets sorted out.

Write it down before you need it

Every one of these controls only works if it's written down somewhere besides the current clerk's head. A short financial-procedures document should say who receives payments, who records them, and who deposits them. It should also say who signs disbursements and how often the board reviews the bank statement.

This matters most exactly when you'd expect it to fail: staff turnover. If that person leaves on short notice, a system with nothing written down loses its institutional memory along with them. A system with a short written procedure hands the next person a map instead of a blank page.

The takeaway for a one-clerk office

You don't need a finance department to run honest books. You need a written procedure that splits receiving, recording, and depositing money across more than one set of hands. You need a board that reviews the bank statement every month, not once a year.

And you need a habit of paying from original invoices, marked paid the day they're paid. Those three habits cost nothing. They protect the utility's cash, and they protect the person trusted to handle it.

For the mechanics of billing, metering, and collections that feed into this, see the billing cycle. For the reports a board should actually be reading every month, see reading your utility's money. For how long to keep the paper trail behind these controls, see records retention for clerks. To see the rest of the ladder, visit /field-guide#managers.

Further reading

RCAP (the Rural Community Assistance Partnership) publishes a free financial-policy guide built for small water and sewer utilities, which includes a sample financial-policy set and a procedures-manual outline a board can adapt. A regional RCAP affiliate or your state's rural water association can help build a written procedures manual sized to a one- or two-person office, and can point you toward fidelity bond coverage appropriate for the funds your utility handles.

Looking for your state? Find your state for certification rules, renewal, and who to call, one page per state.
A free resource from Ziptility. We make software for small water systems.