The 7 Internal Controls Every Research Foundation Must Have Before Audit Season
Research foundations face unique financial risks: federal grant rules, complex revenue recognition, multi-year awards, and strict documentation requirements. Most audit findings come from missing or weak internal controls- not from fraud, but from gaps in process.
This guide outlines the 7 critical internal controls every research foundation must have in place before audit season. These are the exact controls auditors look for, and the ones that protect your organization from findings, funding delays, and compliance issues.
1. Segregation of Duties
Why It Matters
Auditors want to see that no single person controls the entire financial process.
Red Flags
One person enters, approves, and reconciles transactions
No secondary review of financial reports
Executive Director signs checks without documentation
2. Documented Grant Revenue Recognition
Why It Matters
Research foundations often misapply revenue recognition rules, especially for federal grants.
Red Flags
Revenue recognized when cash arrives
No documentation of allowable vs. unallowable costs
No reconciliation between grant budgets and financials
3. Monthly Reconciliations with Evidence
Why It Matters
Auditors need proof that reconciliations were completed- not just a verbal confirmation.
Red Flags
No sign-off
No supporting documentation
Reconciliations done “when someone has time”
4. Formal Approval Workflow for Expenses
Why It Matters
Research foundations must show that expenses were reviewed for compliance before payment.
Red Flags
Email approvals
Verbal approvals
Missing documentation
No grant coding
5. Internal Control Policy (Auditors ALWAYS ask for this)
Why It Matters
If you don’t have a written internal control policy, auditors assume controls don’t exist.
Red Flags
No policy
Policy outdated
Policy not followed
6. Federal Grant Compliance Documentation
Why It Matters
Federal grants require strict documentation, and missing documentation is the #1 audit finding.
Red Flags
No documentation of procurement
No time & effort reporting
No cost allocation methodology
7. Board-Level Financial Oversight
Why It Matters
Auditors want to see that the board is actively reviewing financials.
Red Flags
No finance committee
No monthly financial review
No documented board approval of budgets
You may be at risk for audit findings if:
You recognized revenue incorrectly
You don’t have a written internal control policy
Your reconciliations aren’t documented
Your grant compliance documentation is incomplete
Your board isn’t reviewing financials
Your expense approvals aren’t formalized
Next Step: Take Our FREE Audit Risk Assessment or Internal Controls Assessment