Internal Controls 101: Preventing Inventory Shrinkage and Fraud in Growing Enterprises

The Invisible Drain on Corporate Profitability

In rapidly growing commercial and manufacturing enterprises across Kenya, top-line revenue expansion frequently masks severe operational leakages. As a business expands from a single facility managed directly by the founder to a multi-branch, multi-warehouse operation, the informal checks and balances that once safeguarded enterprise assets inevitably break down.

According to empirical studies conducted across East African mid-market businesses, inventory shrinkage, unauthorized write-offs, procurement kickbacks, and employee collusion account for annual margin losses ranging between 3% and 8% of gross revenue. In competitive sectors operating on single-digit net margins, internal control failures do not merely diminish executive bonuses—they threaten the fundamental viability of the business. Establishing a disciplined internal control framework is the most cost-effective investment an executive team can make to protect enterprise value.

The Anatomy of Internal Theft: Common Shrinkage and Fraud Schemes

To design impenetrable defense mechanisms, directors and internal auditors must understand how inventory and cash are systematically diverted in Kenyan trading and manufacturing environments:

1. Ghost Supplier and Phantom Delivery Schemes

Corrupt procurement personnel collude with warehouse receiving staff to process fraudulent Goods Received Notes (GRNs) for merchandise that was never physically delivered. The accounts payable department settles the invoice against the fraudulent GRN, and the illicit proceeds are divided between the dishonest staff and the phantom vendor.

2. Unrecorded Sales and Cash Skimming

Cashiers or field sales representatives sell stock directly to wholesale customers for cash, bypassing the point-of-sale software entirely, or canceling transactions post-receipt. The physical inventory disappears from the warehouse without a corresponding accounting ledger entry, manifesting later as unexplained “inventory variance.”

3. Deliberate Inventory Obsolescence Write-Downs

Warehouse supervisors falsely categorize high-value, marketable inventory as “damaged,” “expired,” or “obsolete,” writing the assets off the official stock ledger. The discarded goods are subsequently smuggled out through loading docks and resold through secondary grey-market wholesale channels.

The Foundational Pillars of Internal Control: The COSO Framework

Grounded in the Committee of Sponsoring Organizations of the Treadway Commission (COSO) internal control architecture, growing enterprises should implement four core governance disciplines:

1. Absolute Segregation of Incompatible Duties (SOD)

No single individual should possess end-to-end custody and authority over any transaction lifecycle. The employee who initiates a purchase order must never be the person who receives the goods at the warehouse, authorizes the vendor invoice for payment, or executes the bank remittance. Separating authorization, custody, recording, and reconciliation creates natural, systemic checks and balances.

2. The Three-Way Matching Protocol

The finance team must never approve a trade creditor payment without executing an automated or manual Three-Way Match: verifying that the details on the Purchase Order (PO), the quantities on the Goods Received Note (GRN), and the prices on the Supplier Tax Invoice agree perfectly. Any price variance exceeding 1% or quantity discrepancy must halt the automated payment workflow for managerial review.

3. Disciplined Physical Inventory Verification Protocols

Relying on a single annual stock count conducted during December holidays is completely inadequate for growing trading businesses. Organizations should establish two complementary counting regimes:

• Perpetual Cycle Counting: Counting a designated sample of high-velocity, high-value SKUs (Category ‘A’ items under Pareto analysis) on a daily or weekly basis. Variances are investigated immediately while transactional memories are fresh.
• Surprise Spot Audits: Unannounced physical counts led by independent internal audit or finance staff across regional distribution branches.

4. Enforcing Physical Security and Gate Pass Reconciliations

Warehouse perimeters must be fortified with biometric access controls, preventing unauthorized staff from entering storage aisles. Furthermore, third-party security officers stationed at exit gates must verify physical stock against signed, sequentially numbered Delivery Gate Passes before any transport vehicle departs the compound.

Cultivating a Tone at the Top and Whistleblower Culture

Internal controls fail when corporate leadership treats policies as optional guidelines for executive directors while enforcing them rigidly on junior staff. Boards of directors must establish clear codes of conduct, mandatory conflict-of-interest declarations, and secure, anonymous whistleblower reporting channels. Employees who report internal fraud or supply chain collusion must be protected against retaliation.