Charities – Annual Review of Internal Financial Controls

All charities are required by the Charity Commission to review their internal financial controls at least annually. In this article we explore why this is important and how charities can carry this out in practice.

Why are good internal financial controls needed? 

Charities of every size require suitable internal financial controls, as part of good governance. The nature of the financial controls will depend on the size and operations of your charity, and they should be bespoke to you. Robust financial controls can:

  • Ensure effective financial management, for example by keeping expenditure within budget and reviewing management accounts;
  • Protect the charity’s assets, for example by maintaining a fixed asset register and having appropriate insurance cover;
  • Protect the charity’s income, for example by having two people count cash and monitoring fundraising;
  • Safeguard against fraud, for example through bank reconciliations and dual authorisations;
  • Help the charity comply with legal duties to keep appropriate accounting records.

It is worth noting that the Charity Commission also considers that internal controls should cover “how you store personal data in line with UK GDPR”. This could be employee data, lists of donors, or information around beneficiaries.

All trustees are equally responsible for the overall financial management of the charity, although specific tasks can be delegated to the senior management team. As such it is important that the board take time to consider financial controls. All trustees, staff and volunteers should be suitably trained in the policies for financial controls.

The charity sector remains vulnerable to fraud, with 43% of charities reporting fraud or attempted fraud during 2023. In 67% of cases the fraud or attempted fraud was uncovered through internal controls, highlighting how important they are in protecting the charity.

A review of internal financial controls must be undertaken at least annually, However, if there are changes to the way your charity operates, a review should also be undertaken at this point. This could be significant, such as opening a new branch, or smaller developments such as implementing a new digital way of accepting donations.

How to carry out a review of internal financial controls

The key to producing a good review of internal financial controls is to understand how your charity operates. Consider the ways in which your charity receives income, for example donations through cash fundraising, ticket sales, legacies, or trading receipts, and ensure that controls are in place for each method. Consider the ways in which expenditure is made and paid for, and ensure controls are in place. Identify and record all resources and assets held and controlled by the charity (money, tangible fixed assets, personal data), and then consider the controls around those assets. 

With all controls, you should ensure they cannot be overridden by any one person. Ideally there would be segregation of duties, such as a separate preparer and reviewer or authoriser. If this is not possible, due to the small size of the charity, then the trustees could review reports periodically.

You will need good record keeping throughout all areas, and policies in place which are shared internally.

Key areas to consider: 


  • Ensure bank reconciliations are carried out at least monthly. These should be prepared and reviewed by separate people;
  • Ensure payment limits and dual authorisation are in place for online transfers and payments;
  • Keep online banking secure and regularly review those with access;
  • Keep cheques and cash secure, and bank these promptly.


  • Perform checks on donors, including anti-money laundering;
  • Raise invoices promptly and review outstanding debtors;
  • Keep good accounting records.


  • This is a wide-ranging area covering purchases, credit cards, grants and wages & salaries;
  • Ensure written policy of authority limits for expenditure;
  • Track expenditure against budget;
  • Maintain records as required by HMRC and employment law.

Assets, including funds

  • Maintain a fixed asset register;
  • Ensure insurance cover is adequate;
  • Authorise disposals of fixed assets and update records;
  • Keep records of restricted and endowment funds.

There may be other areas your charity needs to review depending on the nature of its operations.

The Charity Commission has extensive guidance detailing examples of internal financial controls in each significant area of your charity. The Charity Commission also provides a checklist which you may find useful to follow. These are both available here and the trustees may wish to read these:

Strong internal financial controls provide a robust working environment for your charity, allowing you to continue to provide the most value for your charitable purpose. 

Need help with charity accounting requirements?

We have a team of charity experts within West & Berry who can advise on internal financial controls and all other aspects of charity accounting. Please get in touch to discuss how we can help you.



Info from CC8:

BDO Charity Fraud Report 2023: