The summary.
PAYROLL IS UNFORGIVING BECAUSE ERRORS AFFECT INCOME AND ARE NOTICED IMMEDIATELY
Verify current statutory rates, which change, and never automate the payment run itself without review. Check totals against expectation before release — a large variance catches an error before it reaches anyone's account.
Late remittance produces penalties and, in some cases, exposure for directors.
REVOKE ACCESS ON DEPARTURE, AUTOMATICALLY, AND VERIFY IT HAPPENED
Departed staff retaining access is a common and serious exposure.
RECONCILE EVERY BANK ACCOUNT EVERY MONTH, WITHOUT EXCEPTION
It is the primary control proving records reflect reality. And check that automated bank feeds have not silently stopped.
SEPARATION BETWEEN INITIATING AND APPROVING PREVENTS MOST INTERNAL LOSS
Control who creates suppliers, who issues credit notes, and who posts manual journals — that last one moves amounts without a transaction and is a common concealment route.
Never change supplier bank details without confirming through a known channel.
DOCUMENT PERFORMANCE CONCERNS CONTEMPORANEOUSLY
Dismissal without a documented record is difficult to defend.
