Internal audit work across security and logistics firms in Central and East Africa consistently reveals the same control weaknesses — weaknesses that create unnecessary fraud risk, cash leakage, and compliance exposure. Here are the five most common red flags, and what you can do about them.

Red Flag 1: No Segregation of Duties in Cash Handling

In many small-to-medium security firms, the same person who receives cash, records it, and prepares the bank reconciliation. This concentration of control is the single most common source of cash misappropriation.

Fix: Separate the cashier function from the reconciliation function, even if it means assigning reconciliation to a line manager rather than another dedicated accountant.

Red Flag 2: Payroll Signed Off by the Same Person Who Processes It

When the HR officer who builds the payroll register also approves it and authorises the bank transfer, ghost employee schemes become trivially easy.

Fix: Implement a mandatory second-level approval for payroll — ideally by the Finance Director or General Manager — before any transfer is made.

Red Flag 3: No Fuel and Vehicle Log Reconciliation

Security firms operate large vehicle fleets. Without a fuel log tied to odometer readings and reconciled monthly against fuel purchase receipts, fuel theft becomes systemic.

Fix: Implement a daily vehicle log (driver, route, starting/ending odometer, fuel used) and reconcile against fuel card statements or petty cash receipts monthly.

Red Flag 4: Petty Cash With No Float Limit and No Surprise Counts

Uncontrolled petty cash — particularly in remote zones — creates a culture where small amounts disappear because no one counts or the float limit is so high it obscures losses.

Fix: Set a strict petty cash float limit by zone (e.g., USD 200–500 depending on zone size). Conduct random, unannounced cash counts at least monthly.

Red Flag 5: Client Billing Not Reconciled Against Contracts

When invoices are raised based on memory rather than contract schedules, billing errors compound — sometimes in favour of the client (lost revenue) and sometimes against (compliance risk).

Fix: Maintain a contract register with billing schedules per client and reconcile each invoice against the contracted rate before issuance.

Building a Strong Control Environment

These five fixes do not require a large budget — they require clear policies, consistent enforcement, and an internal audit function (even a part-time one) that reviews adherence quarterly. Valid Wave Consulting provides internal audit services and control environment assessments for security, logistics, and multi-site organisations across the DRC and Rwanda. Contact us to discuss how we can strengthen your operations.