Risk & Control Matrix

Your comprehensive control framework at a glance

A consolidated view of all risks and controls across your nonprofit's accounting operations, providing transparency, accountability, and audit readiness.

Understanding Your Control Environment

This matrix consolidates all documented risks and their corresponding controls from your 23 Standard Operating Procedures. Each risk/control pair is linked back to the source SOP(s), creating a transparent and traceable control framework.

Identify Gaps

Spot areas where controls may be missing or need strengthening across your processes.

Audit Readiness

Demonstrate your control environment to auditors with clear documentation and traceability.

Risk Mitigation

See which SOPs address each specific risk and ensure comprehensive coverage.

How to Use This Matrix

•Search: Find specific risks or controls using the search bar
•Filter: View risks by category (Financial Reporting, Cash Management, etc.)
•Navigate: Click on SOP badges to view the full procedure documentation
•Review: Use the metrics above the table to understand your control coverage

Showing 118 of 118 risk/control pairs

118

Total Risk/Control Pairs

Risk Categories

SOPs with Controls

1.1

Avg SOPs per Risk

Risk	Control	Category	Related SOPs
Delayed responses, audit noncompliance, missed vendor payments	Shared inbox is reviewed daily and categorized by function; all requests have defined response timeframes based on priority level	Vendor Management	SOP-001
Duplicate, misclassified, or unpaid invoices; cash flow disruption	Invoices routed promptly and uploaded to payment system with initial coding and review checkpoints	Vendor Management	SOP-001
Incomplete, incorrect, or delayed audit responses; reputational and compliance exposure	All audit-related emails are flagged and routed to senior finance staff; supporting documentation is sourced from controlled locations	Vendor Management	SOP-001
Missed deadlines or noncompliant filings; impact on program funding	Inbox monitoring and direct routing to compliance program process owners with internal backup support	Vendor Management	SOP-001
Unaddressed inquiries leading to delays in payments, audit breakdowns, or operational friction	All unresolved items are logged in a standardized tracker and reviewed daily; aging requests are escalated within 48 hours	Vendor Management	SOP-001
Missed or duplicate invoices; vendor service delays or reputational issues	All invoices received are reviewed daily and logged/uploaded to the AP system with duplicates flagged for removal	Vendor Management	SOP-002 SOP-009
Incomplete or incorrect invoice data entry may result in late or over/under payments	Required fields are reviewed and invoice images attached before submission for approval	Vendor Management	SOP-002 SOP-009
Improper coding can misstate financials and impair grant reporting	All invoice lines are coded to accounting system-integrated fields and reviewed by AP and Finance before sync	Vendor Management	SOP-002 SOP-009
Payments made without proper authorization; potential fraud or policy violations	All invoices require assigned approvers before payment is scheduled; dual approval enforced for high-value or project-specific items	Vendor Management	SOP-002 SOP-009
Missed syncs lead to incomplete liability recognition in the general ledger	Sync status monitored weekly; AP confirms invoice appears in GL before close	Vendor Management	SOP-002 SOP-009
Inconsistent or missing AP data may impact cash flow planning or create missed payments	AP summary is reconciled to open bills in the AP system and reflected in weekly cash forecast	Vendor Management	SOP-002 SOP-009
Carrying forward outdated cash data can distort cash position visibility	Fresh copy created weekly using fixed structure; starting balance is pulled from verified bank feed	Financial Reporting	SOP-003
Missing open bills can lead to understated cash needs; duplicating invoices may cause overestimation	Cash flow forecast is reconciled to current accounts payable system open payables weekly	Financial Reporting	SOP-003
Inaccurate cash timing may result in overdrafts, missed payments, or loss of funding controls	Forecast categorized by payment type and reviewed before payment release each week	Financial Reporting	SOP-003
Lack of real-time cash visibility may cause missed obligations or failed payments	Weekly cash balance check ensures sufficient funds are available before payments proceed	Financial Reporting	SOP-003
Uncommunicated changes in cash flow may result in uncoordinated payments or missed issues	Final cash flow forecast is saved, distributed, and archived weekly	Financial Reporting	SOP-003
Misidentifying deposits may result in incorrect revenue classification or missing restricted designations	All revenue deposits are tied to backup documentation and logged with source attribution before entry	Financial Reporting	SOP-004
Improper coding of revenue can distort program financials or violate donor restrictions	Revenue entries are matched to donor records and source documents are tagged with appropriate class/account; Senior Accountant or Controller reviews and approves all entries before posting to the general ledger	Financial Reporting	SOP-004
Net deposits without fee breakout may understate income and overstate expenses	Weekly payment processor entries are recorded gross, with fees posted separately for transparency	Financial Reporting	SOP-004
Misapplied pledge payments can overstate revenue or misalign receivables	Pledge receipts are reviewed and matched to customer balances weekly	Financial Reporting	SOP-004
Incorrect or late time entry may result in inaccurate payroll or grant allocation errors	The payroll system requires employee submission before approval workflow begins	Payroll & HR	SOP-005
Unapproved or improperly approved timesheets could result in unallowable payroll charges	The payroll system prevents finalization of payroll until all required approvals are complete	Payroll & HR	SOP-005
Outdated allocation file leads to incorrect payroll reviews and grant compliance violations	Quarterly review of file accuracy and formal approval process for changes	Payroll & HR	SOP-005
Charging inappropriate hours to grants may create audit compliance issues	Allocation review is tied to Master Allocation File and sensitive-time policy review	Payroll & HR	SOP-005
Incorrect employee setup may cause payroll errors or misallocation of expenses	All employee changes require documented HR approval before system updates	Payroll & HR	SOP-005
Payroll may be processed based on unapproved or incorrect data	Corrections cannot be processed until approval workflow is re-completed	Payroll & HR	SOP-005
Incorrect amounts processed may impact employee satisfaction and compliance	System reports and pre-processing audit are reviewed before submission	Payroll & HR	SOP-005
Missing documentation reduces audit readiness	All payroll support is archived immediately after payroll run	Payroll & HR	SOP-005
One-off exceptions may bypass standard allocations and cause misreported costs	Exceptions require Controller review before payroll is finalized	Payroll & HR	SOP-005
Incorrect grant reporting may lead to disallowed costs or loss of funding	Monthly review ties spend to approved budget and grant agreement	Grant Management	SOP-006
Charging unallowable payroll hours creates compliance exposure and potential repayment	Allocation review compares Master Allocation expectations to timecard activity and grant rules	Grant Management	SOP-006
Miscoded expenses may distort reporting or cause billings to be incomplete or inaccurate	Monthly reconciliation covers all expense types, not payroll alone	Grant Management	SOP-006
Missing or incomplete reconciliation weakens grant reporting and audits	Workbook ties directly to general ledger, payroll summaries, and allocation file	Grant Management	SOP-006
Submitting unsupported or incorrect reports may jeopardize funding	All reports include general ledger tie-outs, payroll detail, and controlled documentation	Grant Management	SOP-006
Improper document storage leads to repeated requests and audit delays	All grant support is centrally organized and version-controlled	Grant Management	SOP-006
Budget errors or omissions may lead to funding shortfalls or rejected proposals	All grant budgets are based on standardized templates and pulled from verified cost data	Grant Management	SOP-007
Misalignment between budget and program scope may cause downstream compliance issues	Each draft is jointly reviewed with program and development staff before submission	Grant Management	SOP-007
Submitting unapproved budgets may expose organization to compliance risk or inaccurate reporting	No budget is submitted externally without internal approval from Controller or Finance Director	Grant Management	SOP-007
Entry discrepancies between Excel version and system entry may result in funding mismatch	Budget entry is cross-checked against approved file and archived with submission evidence	Grant Management	SOP-007
Lack of documentation may make it difficult to track assumptions or reconcile future changes	Each budget is logged and archived with standardized file structure and naming	Grant Management	SOP-007
Inaccurate allocations may result in noncompliant labor charges or audit disallowance	Timekeeping system enforces timecard entry and supervisor sign-off prior to payroll processing	Grant Management	SOP-008
Misalignment between timecard data and reported allocations may result in under- or over-reporting	Allocation reports are archived and reviewed post-payroll before grant cost application	Grant Management	SOP-008
Missing signatures or incomplete timecards may lead to questioned costs during audit	Signed timecards are required monthly and stored centrally for all grant-funded staff	Grant Management	SOP-008
Variances between documentation sources may indicate incorrect charging or accounting errors	Payroll allocations are reconciled across all documents (timecard, stub, journal entry) each cycle	Grant Management	SOP-008
Incomplete or disorganized audit documentation may lead to disallowed costs	Support packets are assembled per grantor specifications and stored in structured folders	Grant Management	SOP-008
Invoices processed without appropriate signoff may result in unauthorized disbursements or compliance violations	Approval routing logic is embedded in AP system and verified during entry	Vendor Management	SOP-010
Delays in approval may stall payments, damage vendor relationships, or misalign with cash flow	Weekly AP review includes aging analysis of unapproved invoices; escalation to Finance Director if needed	Vendor Management	SOP-010
Lack of documented approval may result in audit findings or failed internal controls	Every invoice payment is tied to an AP system approval log or attached manual approval	Vendor Management	SOP-010
Payment without final approval exposes organization to legal or reputational risk	Weekly payment prep includes final review of approval trail for every invoice	Vendor Management	SOP-010
Failure to log or track checks may lead to lost revenue or inaccurate donor records	Every physical check is logged, scanned, and backed up electronically upon receipt	Cash Management	SOP-011
Misapplied funds may create compliance issues or restricted fund misstatement	All designations are reviewed before deposit; sensitive funds are double-confirmed	Cash Management	SOP-011
Deposit errors or system failures may delay fund availability or lose documentation	Each mobile deposit is backed by both a physical scan and a digital confirmation archived electronically	Cash Management	SOP-011
Unauthorized or undocumented disbursements may violate policy or create audit gaps	Treasury payments require documented approval and system-confirmed tracking	Cash Management	SOP-011
Gaps between bank records and general ledger may result in missed income or inaccurate reporting	All treasury activity is reconciled monthly and documented in close folder	Cash Management	SOP-011
Unverified card syncs may introduce misclassified expenses or compliance issues	Transactions are synced only after full review of coding and receipt documentation	Financial Reporting	SOP-012
Missing syncs or timing lags may leave expenses off the books or duplicated	Post-sync reconciliation is performed monthly using system logs and expense reports	Financial Reporting	SOP-012
Unclassified or misclassified deposits may distort revenue recognition	Each revenue item is tied to supporting docs and matched to receivables where applicable	Financial Reporting	SOP-012
Misclassified or unreviewed bank transactions may misstate program or administrative expenses	Every outgoing payment is manually classified with full context and backup cross-check	Financial Reporting	SOP-012
Misaligned records across systems may result in audit flags or financial misstatements	All synced and classified transactions are reconciled monthly as part of close process	Financial Reporting	SOP-012
Errors in payroll journal entries distort program cost reporting and grant allocations	All payroll journal entries are supported by payroll system reports and reviewed by accounting leadership	Financial Reporting	SOP-013
Sensitive or unallowable payroll charges may lead to questioned grant costs	Allocation adjustments are documented and approved before the accrual process	Financial Reporting	SOP-013
Missing accruals understate expenses and misrepresent restricted vs unrestricted balances	Accrual is recalculated monthly and ties to payroll reports and allocation file	Financial Reporting	SOP-013
Misclassification of special payroll items may distort program costs or violate grant restrictions	All special items must be approved by Controller before posting	Financial Reporting	SOP-013
Not reversing accruals causes duplicated expense recognition	Automated reminder in monthly close checklist ensures reversal is completed	Financial Reporting	SOP-013
Unreconciled differences undermine audit support and allocation accuracy	Monthly tie-out is required before close is approved	Financial Reporting	SOP-013
Delayed retrieval may lead to missed reconciliation deadlines	All statements are saved by Day 2 of close cycle	Financial Reporting	SOP-014
Using outdated GL balance may cause inaccurate variance analysis	Export date is always matched to bank statement end date	Financial Reporting	SOP-014
Unexplained variances may mask errors or fraud	All differences must be fully explained and documented	Financial Reporting	SOP-014
Unsupported reconciling items weaken audit trail and internal control	All backup is stored with consistent naming in a central location	Financial Reporting	SOP-014
Lack of oversight may result in uncorrected errors or stale items	Dual review ensures reconciliations are timely, accurate, and complete	Financial Reporting	SOP-014
Failure to record prepaids correctly may overstate current period expenses	All large, multi-month payments are reviewed for deferral at AP entry	Financial Reporting	SOP-015
Missing amortization may understate expenses and overstate assets	Prepaid tracker is reviewed monthly and tied to actual journal entry postings	Financial Reporting	SOP-015
Overstated or stale prepaid balances may distort net assets or cost allocations	Prepaids are fully reconciled to support schedule each period	Financial Reporting	SOP-015
Retaining fully amortized balances may clutter reports or impact analysis	Closed prepaids are archived and excluded from active amortization logic	Financial Reporting	SOP-015
Missing capitalizable purchases may overstate expenses and understate assets	AP and card reviews include a fixed-asset flag step for large or durable purchases	Financial Reporting	SOP-016
Improper reclassifying may misstate capital assets or distort program costs	Reclass entries are supported by invoices and reviewed by senior accounting staff	Financial Reporting	SOP-016
Incomplete register leads to missing depreciation or audit support gaps	Fixed asset register is updated monthly and reconciled to GL balances	Financial Reporting	SOP-016
Missing or incorrect depreciation causes overstatement of assets and misstated expenses	Depreciation is calculated from the register and posted monthly with support attached	Financial Reporting	SOP-016
Retaining disposed assets inflates asset values and depreciation expense	Periodic review ensures register reflects only active assets and disposals are recorded timely	Financial Reporting	SOP-016
Unrecorded leases lead to understated liabilities and noncompliant financial reporting	Central lease register ensures all active leases are documented and tracked	Financial Reporting	SOP-017
Incorrect initial measurement impacts ongoing lease expense and balance sheet accuracy	Initial calculations are performed using standardized templates and reviewed by Controller	Financial Reporting	SOP-017
Missing monthly entries misstate liabilities and expenses	Monthly close checklist includes lease entry posting tied to lease schedule	Financial Reporting	SOP-017
Unreconciled variances may compound over time and cause audit issues	Lease accounts are reconciled monthly to controlled schedules	Financial Reporting	SOP-017
Unrecorded modifications lead to misstated liabilities and incorrect expense timing	All lease changes require updated schedules and Controller-reviewed journal entries	Financial Reporting	SOP-017
Failure to reverse accruals may double-count revenue	Accrual reversal is a required first-step close task and tied to original JE reference	Financial Reporting	SOP-018
Missing unbilled revenue understates grant income and receivables	Grant spend is reviewed monthly against billing cadence to identify timing gaps	Financial Reporting	SOP-018
Incorrect accruals may lead to overstated revenue or compliance issues	Accruals are derived from documented spend and reviewed by Controller	Financial Reporting	SOP-018
Misstated deferred revenue can misalign revenue with performance obligations	Deferred revenue entries are supported by grant/donor schedules and reconciled monthly	Financial Reporting	SOP-018
Misapplied pledge payments may overstate revenue or AR	Pledge activity is reconciled monthly between donor management system and accounting system	Financial Reporting	SOP-018
Missing NPV adjustments can misstate long-term receivables and revenue	Annual NPV review is scheduled and supported by controlled pledge schedule	Financial Reporting	SOP-018
Using mismatched report dates can create false variances and delay close	Both reports are pulled using the identical month-end as of date and stored together	Financial Reporting	SOP-019
Unreconciled totals may indicate missing liabilities or duplicate postings	Total-level tie-out is required before any close signoff	Financial Reporting	SOP-019
Vendor-level differences may hide duplicate bills, missing syncs, or coding errors	Targeted vendor tie-out ensures key liabilities are aligned across systems	Financial Reporting	SOP-019
Unresolved discrepancies can result in misstated liabilities and audit exceptions	Every mismatch must be traced to a specific cause and resolved or documented	Financial Reporting	SOP-019
Carrying unresolved errors forward compounds GL inaccuracies	Errors are corrected before close; timing items are clearly flagged and tracked	Financial Reporting	SOP-019
Closing without AP tie-out may leave liabilities incomplete	Controller review/signoff required prior to financial statement preparation	Financial Reporting	SOP-019
Missing platform reports may prevent complete revenue recognition and fee tracking	Monthly close checklist requires report downloads and archiving	Financial Reporting	SOP-020
Without reconciliation, revenue could be understated (net-only) or duplicated	Net payouts are tied to bank deposits and gross receipts are verified monthly	Financial Reporting	SOP-020
Recording net-only deposits understates revenue and obscures fee rates	Deposits are recorded gross with fees separated every month	Financial Reporting	SOP-020
Misclassified campaigns may violate donor restrictions or distort project tracking	Monthly cross-check ensures campaign metadata matches general ledger coding	Financial Reporting	SOP-020
Unreconciled balances may lead to audit exceptions or revenue misstatement	Controller review and stored reconciliation package required before close completion	Financial Reporting	SOP-020
Incorrect starting balances may cascade into misstated net asset totals	Net asset schedules always begin with a Trial Balance export as of close date	Financial Reporting	SOP-021
Misclassification between restricted/unrestricted may violate donor intent and distort reporting	Rollforward is updated monthly and fully tied to GL balances	Financial Reporting	SOP-021
Improper restricted fund treatment can create compliance and audit findings	Restricted activity is reviewed monthly against donor/grant terms and coding	Financial Reporting	SOP-021
Missing schedules weaken audit trail and may delay reporting	Close checklist identifies required schedules and templates are updated from GL exports	Financial Reporting	SOP-021
Unreviewed schedules may carry errors into financial statements	Controller review and archive required before financial statement reporting begins	Financial Reporting	SOP-021
Preparing statements before close completion can result in misstated or incomplete reporting	Financial statements are not generated until close checklist is fully complete	Financial Reporting	SOP-022
Incorrect report settings may cause missing transactions or misaligned periods	Standard report settings (accrual + month-end cutoff) are used consistently each month	Financial Reporting	SOP-022
Undetected errors may pass into leadership reporting and audits	Controller tie-out review ensures all major balances reconcile to close support	Financial Reporting	SOP-022
Lack of variance context reduces usefulness and may lead to misinterpretation	Material variances are documented monthly with finance leadership review	Financial Reporting	SOP-022
Missing key schedules may weaken reporting completeness	Standardized monthly package checklist ensures consistent contents	Financial Reporting	SOP-022
Distributing unreviewed statements may harm trust and cause decisions based on errors	Controller approval required prior to any internal or board distribution	Financial Reporting	SOP-022
Missed tax credit reporting deadlines may create compliance exposure or investor concern	Weekly monitoring of tax credit inbox requests ensures timely awareness and response	Financial Reporting	SOP-023
Inaccurate weekly tracking may lead to errors in formal compliance submissions	Weekly tax credit reports are built from verified general ledger and bank activity and archived centrally	Financial Reporting	SOP-023
Missing tax credit entries may misstate restricted balances or project costs	Tax credit journal entry review is a required close step led by tax credit process owner and reviewed by senior accounting	Financial Reporting	SOP-023
Missing tax credit documentation can result in audit findings or delayed investor reporting	All tax credit actions are paired with backup evidence stored in structured folders	Financial Reporting	SOP-023
Incorrect or late compliance responses may damage program standing or funding	Compliance responses are reviewed by Controller/Finance Director before submission	Financial Reporting	SOP-023
Without a deliverables calendar, tax credit deadlines may be missed	Tax credit tracker/calendar is updated continuously by process owner	Financial Reporting	SOP-023

Your Expert

Kevin Collingsworth

Partner

"I'm here to help you customize these controls for your organization's specific needs."

Need help implementing these SOPs?

Every organization is unique. Fill out the form below to connect with our team and discuss how to adapt these procedures for your systems.

Preview form: entries are not sent or stored by this form. Do not enter confidential information.

Nonprofit finance support

Nonprofit Accounting & CFO Services in Baltimore