Nonprofit Internal Controls Checklist That Works

A missing receipt is rarely just a missing receipt. It can be a sign that responsibilities are unclear, records are incomplete, or one well-meaning person has been asked to handle too much alone. A nonprofit internal controls checklist gives leaders a practical way to protect the resources entrusted to their organization without creating unnecessary red tape.

For a small or growing nonprofit, controls are not about assuming someone will act improperly. They are about making the right process easier to follow, catching honest mistakes early, and giving the board reliable information before it has to make a difficult decision. Donors, grantors, staff members, and the communities you serve all benefit when financial stewardship is clear.

Start With the Decision Your Organization Needs to Make

Before adopting new procedures, consider what keeps your leadership team up at night. Perhaps the executive director is approving bills, signing checks, and reconciling the bank account because there are only two employees. Perhaps the treasurer receives financial reports that are late or too vague to be useful. Or perhaps a grant has restrictions that are being tracked in a spreadsheet only one person understands.

The right controls should address those real risks. A large organization with a finance department can separate duties across several people. A volunteer-led organization may need a board member to review bank activity each month instead. The principle stays the same: no single person should be able to authorize a transaction, process it, record it, and review it without meaningful oversight.

Controls should also fit the organization’s capacity. A policy that no one can realistically follow is not a control. It is a document waiting to be ignored.

Nonprofit Internal Controls Checklist

Use this checklist as a working conversation with management, the finance committee, and the board. The goal is not to check every box on day one. It is to identify where your organization needs clearer ownership and a reasonable next step.

• Define financial authority in writing. Your board should approve a budget, establish who may sign contracts, and set approval limits for spending, reimbursements, and credit card purchases. The limits should reflect your organization’s size and cash flow, not a number copied from another nonprofit’s policy.

• Separate financial duties where possible. Different people should ideally handle receiving funds, approving expenses, entering transactions, signing payments, and reconciling accounts. When staffing is limited, use compensating controls, such as an independent board member reviewing the bank statement and canceled checks.

• Require documentation before payment. Invoices, receipts, contracts, purchase approvals, and evidence that goods or services were received should support every disbursement. A credit card statement alone usually does not explain the business purpose of a charge.

• Reconcile bank and investment accounts promptly. Reconciliations should generally be completed monthly by someone who does not issue payments. A supervisor, treasurer, or finance committee member should review and document that review, especially for accounts with significant activity.

• Track restricted funds separately. Grant and donor restrictions should be visible in your accounting records, not just in a grant file or someone’s memory. Leaders need to know whether cash on hand is available for general operations or designated for a specific program, purpose, or time period.

• Use a consistent process for incoming money. Whether donations arrive by mail, online, at an event, or through a payment app, the organization should record them promptly, secure checks and cash, and reconcile deposits to donor records. Two people counting event cash is a simple practice that can prevent confusion later.

• Control payroll and contractor payments. Maintain approved pay rates, timesheets where applicable, onboarding records, and proper tax documentation. Changes to direct deposit details or compensation deserve special care because they are common targets for error and fraud.

• Limit access to financial systems. Give staff and volunteers access only to the functions they need. Remove former employees and board members promptly, use unique logins rather than shared passwords, and review user permissions periodically.

• Review financial reports regularly. The board should receive understandable reports that compare actual results with the approved budget, explain meaningful variances, show available cash, and identify restricted balances. Reports should invite questions, not merely satisfy a meeting agenda requirement.

• Protect records and prepare for interruptions. Keep financial records organized, back up electronic data, retain documents according to an adopted schedule, and identify who can step in if the usual bookkeeper, treasurer, or executive director is unavailable.

Make Board Oversight Useful, Not Performative

A board does not need to manage every transaction. Its responsibility is governance: asking whether the organization has sound processes, whether reporting is reliable, and whether management has the resources to correct problems.

That distinction matters. When board members receive a detailed general ledger without context, they may not know what to look for. A clearer monthly reporting package can show the budget-to-actual comparison, statement of financial position, cash flow outlook, major grant activity, and a short explanation of unusual items. If revenue is behind plan, the board should understand whether that reflects timing, an unrenewed grant, a delayed event, or a deeper operational issue.

Board review should be documented in meeting minutes or committee records. Documentation does not need to be elaborate. It simply needs to show that someone independent of daily processing reviewed the information, raised questions when appropriate, and followed up on concerns.

Pay Special Attention to Cash, Cards, and Restricted Grants

Certain areas deserve closer attention because they create frequent pressure points for nonprofits.

Cash is difficult to trace once it changes hands. If your organization collects cash at events, use pre-numbered receipts or ticket records, have two unrelated people count the funds, complete a count sheet, and deposit the money promptly. The person who counts the cash should not be the only person recording the deposit in the books.

Credit cards make purchases convenient, but convenience can blur accountability. Limit the number of cardholders, set reasonable spending limits, prohibit personal purchases, and require receipts with an explanation of purpose. Review transactions monthly, including charges that may appear small. Repeated small charges can be just as concerning as a single large one.

Restricted grants require another level of care. A grant award letter may specify allowable costs, reporting deadlines, matching requirements, or limits on administrative expenses. Make sure program and finance staff understand those terms before spending begins. It is much easier to code expenses correctly as they occur than to reconstruct compliance months later when a report is due.

Turn the Checklist Into a Living Process

The most useful control system is one people understand. Assign an owner to each procedure, explain the purpose behind it, and revisit the process when staffing, funding, or software changes. A policy written when the organization had one employee and a volunteer treasurer may no longer fit after a new program, new grant, or new payment platform is added.

Begin with the highest-risk gaps rather than trying to redesign everything at once. If monthly bank reconciliations are late, fix that first. If restricted funds are not clearly tracked, establish a reporting method before accepting additional restricted awards. If approval authority is unclear, bring a practical delegation policy to the board for discussion.

Montgomery Advisory helps nonprofit leaders translate financial procedures into information they can use for stewardship and decision-making. The point is not to make your organization feel corporate. It is to make sure the people carrying out its mission can explain where resources came from, how they were used, and what decisions need attention next.

A good control does more than prevent a problem. It gives staff and board members the confidence to ask clear questions, address concerns early, and keep their attention where it belongs: on the work the organization exists to do.