I can’t tell you how many times I’ve heard this:

“We’re a small business — we don’t need all those internal controls.”

Usually, that line comes right before we find something that’s been quietly draining cash or creating chaos for months.

It’s rarely fraud.

It’s usually something smaller — a duplicate vendor payment, a missed deposit, or an account nobody’s reconciled since last summer.