Why Internal Controls Fail: Common Deficiencies in Banking and How to Fix Them

For financial institutions, internal controls are the unseen framework that supports day-to-day operations, reliable financial reporting, and stakeholder confidence. When those controls fail, the consequences can be far-reaching. Regulatory scrutiny intensifies, financial statements may require correction, and trust, once lost, can be difficult to restore.

In an industry marked by high transaction volumes, complex products, and constant regulatory change, internal controls are more than a compliance exercise. They are foundational to stability and long-term success.

What makes control failures especially challenging is how quietly they develop. Weaknesses often remain hidden until an audit finding, examination issue, or financial misstatement brings them into focus. Institutions that understand where controls tend to break down, and address those areas early, are far better positioned to avoid costly disruptions.

Understanding Internal Controls Over Financial Reporting

Internal Controls over Financial Reporting (ICFR) are designed to provide reasonable assurance that financial statements are accurate and fairly presented. For banks and credit unions, this responsibility is magnified by operational complexity. Thousands of transactions flow through multiple systems each day, increasing the likelihood of error if controls are poorly designed or inconsistently applied.

Control issues exist on a spectrum. Some deficiencies reflect isolated breakdowns that limit timely detection of errors. Others rise to the level of significance because of their importance to oversight and governance. At the most serious end are material weaknesses, where there is a reasonable possibility that a material misstatement will not be prevented or detected in time. What often separates these categories is not the original issue, but how quickly and effectively it is addressed.

Where Controls Most Often Break Down

Although every institution has unique risks, common themes emerge across the financial services industry.

Risk Assessments That Lag Behind Change

Risk assessments frequently fail to keep pace with evolving operations. New products, vendor relationships, or changes in market conditions introduce risks that existing controls may not fully address.

For example, a community bank that outsources mortgage servicing may improve efficiency but also introduce new reporting risks tied to escrow balances or interest calculations. Without revisiting its risk assessment, those exposures may go unmonitored. Similar issues arise when institutions expand into more complex assets without strengthening valuation and review procedures.

A Weak or Inconsistent Control Environment

The control environment sets expectations for the entire organization. When leadership overrides established processes or sends mixed messages about accountability, even well-designed controls lose effectiveness.

Problems also arise when responsibility for key processes is unclear. If multiple departments share ownership of critical functions, such as fair value reviews, accountability can become diluted, making it harder to identify and correct issues when they occur.

Gaps in Control Execution

Many deficiencies stem from how controls are performed rather than how they are designed. Segregation of duties remains a persistent challenge, particularly for smaller institutions with limited staffing. When one individual has the ability to initiate and approve transactions, the risk of error or fraud increases.

In other cases, controls lack sufficient documentation. Areas such as complex accounting estimates or allowance methodologies may rely too heavily on institutional knowledge rather than clearly defined procedures, leading to inconsistent application over time.

Breakdowns in Information Flow

Outdated systems and fragmented data sources often undermine otherwise sound controls. When information moves between platforms without proper reconciliation, inconsistencies can emerge in reported balances.

System conversions introduce additional risk. Temporary access granted during implementation may not be fully removed, leaving gaps in user access controls long after the conversion is complete.

Monitoring That Falls Behind

Even when weaknesses are identified, delayed remediation can turn manageable issues into larger problems. Institutions may recognize gaps in approval processes or monitoring activities but postpone corrective action due to competing priorities. Over time, unresolved issues increase exposure to audit findings, regulatory criticism, or financial loss.

The Real-World Cost of Control Failures

The consequences of weak internal controls are tangible. Institutions have been forced to restate financial statements due to errors tied to inadequate oversight and insufficient documentation. Others have struggled with inconsistent application of accounting standards, such as CECL, resulting in unreliable estimates and increased scrutiny from auditors and regulators.

Beyond direct financial costs, control failures strain relationships with examiners, investors, and customers, often leading to higher audit fees and lasting reputational damage.

Building Stronger Control Frameworks

Effective internal controls depend on both structure and culture. Leadership must clearly communicate expectations around accountability and integrity. Risk assessments should be updated as operations change, not treated as static, annual requirements.

Technology can support stronger monitoring through automation and real-time alerts, but tools are only effective when employees understand their role in the control process. Training that explains the purpose of controls—not just the mechanics—helps ensure consistency and ownership.

Independent reviews and internal audits provide valuable perspective, particularly during periods of growth or change. When deficiencies arise, addressing root causes rather than applying temporary fixes is critical to preventing repeat issues.

How HTB Can Help

At HTB, our team works with banks and credit unions to evaluate internal control frameworks, identify vulnerabilities early, and implement practical, sustainable improvements. Our team supports institutions through risk assessments, internal audit services, complex accounting implementations, and targeted training for control owners.

By focusing on clear accountability and actionable recommendations, we help financial institutions strengthen internal controls, improve reporting reliability, and reduce regulatory risk. Contact us today to start a conversation about your institution’s risk priorities.

Due Diligence That Drives Value: How Independent Loan Reviews Strengthen Bank Acquisition Targets

When a bank pursues an acquisition, the stakes couldn’t be higher. Among all the assets on the balance sheet, the loan portfolio represents both the greatest opportunity and the most significant risk. For acquiring institutions, independent loan reviews have evolved from a routine compliance exercise into a critical strategic tool that protects shareholder value and strengthens the foundation for successful integration.

The Hidden Risks Lurking in Loan Portfolios

In today’s regulatory environment, examiners are looking beyond simple asset quality metrics. They’re evaluating the comprehensive credit risk management practices that support those assets. An acquisition target might present clean financial statements and acceptable delinquency rates on the surface, yet harbor significant vulnerabilities in underwriting consistency, documentation quality, or covenant monitoring. These weaknesses can transform an attractive deal into a source of unexpected losses and regulatory scrutiny after closing.

Commercial Real Estate portfolios deserve particular attention during acquisition due diligence. While CRE loans offer attractive returns and help banks scale efficiently, they carry heightened regulatory expectations around concentration management, stress testing, and ongoing borrower monitoring. An independent review reveals whether the target institution has implemented the enhanced credit risk management practices that regulators now demand, or whether the acquiring bank will inherit a compliance gap that requires immediate remediation.

What Independent Reviews Uncover

The value of an independent loan review during acquisition due diligence lies in its objectivity. While management representations and internal audit findings provide useful information, they lack the critical distance that third-party experts bring to the evaluation. Independent reviewers examine hundreds of data points across sample loans, validating risk ratings, testing global cash flow analyses for accuracy and currency, and identifying patterns that might escape internal review processes.

Documentation exceptions represent a common but serious vulnerability. Missing files, improperly recorded mortgages, lapses in UCC filings, or inadequate collateral insurance can each compromise the bank’s position in a loan relationship. During normal operations, these issues might remain dormant, but they create immediate exposure when economic conditions deteriorate or when regulatory examiners conduct post-acquisition reviews. Discovering these gaps before closing allows acquirers to negotiate appropriate purchase price adjustments and develop remediation plans.

Equally important is the assessment of underwriting consistency across the lending team. Policy exceptions aren’t inherently problematic when they’re properly documented, supported by clear risk mitigants, and appropriately approved. However, inconsistent application of lending standards or inadequate tracking of exceptions signals deeper issues in credit culture that can metastasize across the combined institution if not addressed early.

From Compliance to Strategic Value

The insights gained from independent loan reviews directly enhance valuation accuracy. By identifying loans that require rating downgrades, quantifying potential credit losses, and assessing the adequacy of reserves, these reviews provide the concrete data needed to refine purchase price calculations and structure appropriate representations and warranties. They also establish a baseline for measuring portfolio performance post-acquisition and support the fair value measurements required under acquisition accounting standards.

Perhaps most valuable is the roadmap that independent reviews provide for post-merger integration. Rather than discovering credit administration weaknesses months after closing, acquirers enter the transaction with clear visibility into areas requiring immediate attention, loans needing enhanced monitoring, and opportunities to harmonize underwriting standards across the combined institution.

A Stronger Finish for Smarter Acquisitions

In an era where regulators evaluate both asset quality and the management practices supporting those assets, independent loan reviews have become indispensable in bank M&A transactions. They transform due diligence from a defensive exercise into a strategic advantage, protecting acquirers from hidden risks while laying the groundwork for successful integration. For banks serious about value creation through acquisitions, partnering with experienced independent reviewers isn’t optional—it’s essential to long-term success.

Hannis T. Bourgeois provides independent loan reviews to help banks evaluate credit risk in acquisition transactions. Contact our team today to learn how we can strengthen your next transaction through comprehensive, objective portfolio assessment.

The Hidden Value of Accounting: Beyond Tax Season and Compliance

When most business owners think about accounting, their minds jump immediately to tax deadlines, compliance requirements, and regulatory obligations. It’s a reactive mindset where accounting becomes important when April approaches or when the IRS sends a letter. This narrow view, while understandable, overlooks something crucial: accounting is far more than a compliance function. It’s a strategic business tool that drives growth, informs decision-making, and creates long-term value for organizations at every stage of development.

The difference between viewing accounting as a necessary obligation and leveraging it as a strategic asset can mean the difference between a business that merely survives and one that truly thrives.

The Traditional View vs. the Strategic Reality

For many business owners, accounting exists in a compartmentalized space reserved for specific times of year. Tax preparation dominates this perception, involving the gathering of receipts, organizing of documents, and meeting of deadlines. Regulatory compliance, audit preparation, and avoiding penalties round out this familiar picture.

This reactive approach has significant limitations. When accounting is viewed solely as a compliance function, businesses miss opportunities for proactive financial management. They’re looking backward at what happened rather than forward at what could be. They’re checking boxes rather than uncovering insights. Strategic accounting changes all of that.

The Foundation: Accurate Financial Intelligence

At the core of strategic accounting lies accurate financial intelligence. The three critical financial statements, the balance sheet, income statement, and cash flow statement, form the bedrock of this intelligence. Each serves a distinct purpose, and when viewed together, they create a comprehensive picture of organizational health.

The balance sheet offers a snapshot of financial position at a specific moment, detailing what a business owns, owes, and the equity that remains. The income statement tells the story of profitability over a period, revealing whether the business is generating profit and where revenues and expenses are trending. The cash flow statement tracks liquidity, showing how cash moves through the business and whether there is sufficient liquidity to meet obligations and pursue opportunities.

Accuracy matters profoundly because these documents provide the foundation for all strategic decision-making. An inaccurate balance sheet might mask growing liabilities. An incorrect income statement could suggest profitability where losses actually exist. A flawed cash flow statement might hide an impending liquidity crisis. This is also where the distinction between bookkeeping and strategic accounting becomes important. Bookkeepers manage day-to-day records and ensure every dollar is tracked, providing the essential raw data. Strategic accountants transform that data into actionable insights, analyzing patterns, identifying anomalies, and turning numbers into narratives that inform business strategy.

Supporting Informed Decision-Making

Every significant business decision carries financial implications, and accounting data drives strategic choices in ways many business owners don’t fully appreciate. Consider pricing strategy: analyzing profit margins reveals which products or services deliver the best returns, where pricing may be too low to support sustainable operations, and where adjustments could improve profitability without sacrificing competitiveness.

Strategic accounting also helps identify cost reduction opportunities with nuance. Not all cost cutting is equal, and reducing expenses in the wrong areas can damage quality or operational efficiency. Professional accountants distinguish between wasteful spending that should be eliminated and valuable investments that should be protected. When evaluating major capital investments, accurate return-on-investment projections separate good ideas from great ones, replacing gut feelings with data.

Financial forecasting extends this value into the future. Strategic accountants help businesses model different growth scenarios and anticipate challenges before they arrive. What happens if sales grow by twenty percent next year? What if a key client leaves or supply costs increase? Modeling these scenarios creates preparedness and allows businesses to make strategic choices with eyes open to potential outcomes.

Cash Flow: The Lifeblood of Business Success

An old business adage holds that revenue is vanity, profit is sanity, but cash is king. A profitable business can still fail due to poor cash flow management, while effective monitoring ensures the liquidity necessary for operations and growth. Bills must be paid with cash, not accounting profits. A business might show strong profits on its income statement while simultaneously running out of cash because of timing differences between when revenue is recognized and when it is actually collected.

Strategic accounting prevents cash flow crises through vigilant monitoring and proactive planning. Real-time visibility into inflows and outflows allows businesses to see problems developing before they become critical. Identifying seasonal patterns and planning for large expenses ensures businesses are never caught off guard by predictable cycles or growth-related capital needs. When cash flow problems do emerge, professional accountants diagnose underlying causes, whether slow customer payments, excess inventory, pricing gaps, or rising overhead, rather than simply treating symptoms.

From Start-Up to Established Enterprise

Accounting plays a critical role at every stage of business growth, and early engagement with professional services provides benefits that compound over time. Refining a business plan with financial reality helps entrepreneurs move beyond optimistic projections to understand what success actually requires in concrete terms. Many promising ideas fail not because the concept was flawed, but because the financial model could not support sustainable operations.

Identifying startup tax deductions and incentives, including credits for research and development, deductions for startup costs, and other opportunities, can preserve precious early-stage capital. Establishing proper financial systems from the beginning prevents the painful process of fixing foundational problems later, which costs far more than getting things right at the start.

As businesses grow, certain milestones signal the need for enhanced accounting support: consistent revenue growth that creates transaction complexity, expansion across state lines that introduces new tax jurisdictions and compliance obligations, investor requirements for professionally reviewed financial statements, and preparations for mergers, acquisitions, or eventual sale of the business. Each of these transitions demands a level of financial sophistication that reactive, compliance-only accounting cannot provide.

Tax Strategy: Moving from Reactive to Proactive

The limitations of once-a-year tax thinking become clear when you consider how many tax-saving opportunities depend on actions taken throughout the year. By the time December ends, most opportunities to reduce that year’s tax liability have passed. Equipment purchases that could have been timed for maximum deduction benefit, strategic timing of income and expenses, and retirement plan contributions all require advance planning and year-round attention.

Ongoing tax strategy also means taking advantage of credits and incentives as they become available. Tax laws change, new incentives are introduced, and opportunities emerge throughout the year. Businesses engaged in year-round tax planning respond to these developments in real time rather than discovering them retrospectively.

Business structure is another area where professional guidance delivers substantial value. Sole proprietorships, LLCs, partnerships, and corporations each carry different tax treatments and implications. The same revenue and expenses can result in dramatically different tax liabilities depending on how the business is structured. Strategic accountants can model tax implications under different structures and evaluate whether a change could reduce liability, minimize audit risk, or provide other financial benefits.

Financial Controls and Risk Management

Proper internal controls ensure accuracy in financial reporting, maintain segregation of duties, and protect company assets. But they also serve as an early warning system. Unusual patterns in expense reports, discrepancies between physical inventory and records, or other irregularities can indicate problems ranging from honest errors to serious fraud. Identifying these red flags early allows businesses to investigate and address issues while they are still manageable, rather than waiting until they have caused significant damage.

Regulatory compliance, meanwhile, builds trust with the stakeholders who matter most: investors, customers, lenders, and employees. The costs of non-compliance extend far beyond financial penalties. Legal challenges consume management time and attention. Reputational damage from compliance failures can persist for years. Loss of business opportunities occurs when non-compliance disqualifies companies from contracts or partnerships. When these costs are fully considered, investment in proper compliance looks not like an expense, but like insurance that pays for itself many times over.

When to Bring in Professional Help

Signs that a business has outgrown DIY accounting often emerge gradually. Uncertainty about tax preparedness, errors in previous filings, significant business growth, investor demands for professional financial statements, facing a potential audit, or preparing for a business sale are all signals that professional accounting support has become necessary, not optional. When mistakes are factored in, amateur accounting is often far more expensive than professional services.

Even businesses in early stages benefit from professional guidance to establish proper foundations. Many accounting firms offer complimentary initial consultations, allowing business owners to benefit from expert perspective while assessing whether ongoing engagement makes sense for their current situation.

How HTB Can Help

At HTB, we have understood for nearly 100 years that accounting is about far more than tax season and compliance. Our team of experienced CPAs and financial professionals offer comprehensive support, from outsourced accounting and financial statement preparation to year-round tax planning, cash flow management, business advisory, and more, all tailored to your business needs and growth stage.

The competitive advantage of strategic accounting is often decisive. Businesses that leverage it as a strategic tool rather than a necessary obligation make better decisions, avoid costly mistakes, and seize opportunities that others miss. Contact us today to discover how we can transform your financial management from a compliance obligation into a genuine strategic advantage.

Did You Pay IRS Penalties During COVID? The Kwong Decision May Entitle You to a Refund

 Millions of Americans struggled to meet IRS deadlines during the COVID-19 pandemic. Between business closures, staffing shortages, and unprecedented disruption to daily life, filing taxes on time became extraordinarily difficult for countless taxpayers. Many ended up paying significant penalties and interest as a result. Now, a groundbreaking federal court decision is offering hope that some of those payments may be recoverable.

In Kwong v. United States, the U.S. Court of Federal Claims ruled that the IRS miscalculated tax deadlines during the COVID-19 emergency. The decision could open the door for taxpayers who paid penalties between January 20, 2020, and July 10, 2023, to claim refunds.

Understanding the Legal Framework

Internal Revenue Code Section 7508A allows the IRS to extend tax filing and payment deadlines when taxpayers are affected by federally declared disasters. Under the 2019 version of Section 7508A(d), the law mandated an automatic extension running from the earliest declared incident date through 60 days after the latest incident date. For COVID-19, the earliest incident date was January 20, 2020, and FEMA established May 11, 2023, as the latest incident date—meaning the automatic extension ran through July 10, 2023, a span of more than three years.

The statute says this mandatory postponement period “shall be disregarded” when calculating various tax deadlines, including the two-year window to file a refund suit. The IRS, however, argued through its regulations that disaster extensions could never result in more than one year being disregarded, effectively capping the relief available to taxpayers.

What the Court Decided and Why It Matters

Terry Kwong sought refunds of penalties for multiple tax years. The IRS argued his claims were time-barred under the normal two-year limitation, but Kwong contended that the entire COVID-19 disaster period should be excluded from that calculation. The Court of Federal Claims agreed. Reading the plain language of the statute, the court held that the full period from January 20, 2020, through July 10, 2023, must be disregarded when computing filing deadlines, making Kwong’s February 2023 lawsuit timely.

The court also rejected the IRS’s regulatory interpretation that would have capped the extension at one year. Citing the Supreme Court’s decision in Loper Bright Enterprises, which eliminated judicial deference to agency interpretations of ambiguous statutes, the court concluded it was bound by the plain text of the law. The regulation, in the court’s view, had “misread” what the statute required. It’s worth noting that Congress amended Section 7508A in 2021 and again in 2025 to cap disaster extensions, but both amendments apply only to disasters declared after their enactment. The COVID-19 declaration predated these changes, so the original, more generous version of the law still governs.

Who Might Be Entitled to Relief?

The implications extend well beyond Terry Kwong’s case. Any taxpayer who paid IRS penalties or interest for deadlines falling within the COVID-19 disaster period may have grounds to seek a refund—including failure-to-file penalties, failure-to-pay penalties, and associated interest. This also applies to taxpayers with earlier tax years whose administrative or judicial deadlines happened to fall during the pandemic period.

Additional relief came through the Disaster-Related Extension of Deadlines Act, signed into law on December 26, 2025. This legislation modified Section 7508A to ensure that disaster postponement periods are treated as extensions when calculating refund amounts, closing a gap that previously prevented some taxpayers from recovering the full amount of their overpayments.

Taking Action to Preserve Your Rights

For taxpayers who believe they may have overpaid penalties, time remains of the essence. The first step is obtaining IRS transcripts to identify exactly what penalties and interest were assessed and paid between January 20, 2020, and July 10, 2023. Because the government may appeal the Kwong decision, tax professionals are recommending that eligible taxpayers file a protective refund claim using Form 843 (Claim for Refund and Request for Abatement), citing the Kwong decision as the legal basis. A protective claim acts as a placeholder, stopping the statute of limitations clock while legal developments continue to unfold. Claims related to this decision generally need to be filed by July 10, 2026, but acting sooner avoids administrative hurdles. For penalties that remain unpaid, taxpayers can also request abatement based on the Kwong decision.

How HTB Can Help

Recent court decisions and legislative changes have added complexity to how disaster-related tax deadlines and penalty relief are interpreted. Taxpayers who experienced penalties or interest during the COVID-19 period may benefit from understanding how these developments apply in practice. Our tax professionals work with individuals and businesses on federal tax compliance and advisory matters and regularly assist with questions related to IRS deadlines, penalties, and interest.

If you have questions about the Kwong decision or would like guidance on how these developments may relate to your situation, contact us to discuss next steps.