Scope sheet
finbryn.com
Audit support
Internal controls documentation
Internal controls documentation writes down how your QuickBooks Online, Xero or NetSuite close, AP, AR and payroll cycles actually run today: who approves a payment, who reconciles an account, and how often. Finbryn's team builds the control matrix, flags segregation-of-duties gaps in plain language, and hands you a version-controlled document, while any formal opinion on control effectiveness stays with a licensed auditor.
What is included
- Process narratives for the financial close, AP, AR and payroll cycles
- A control matrix listing each control, its owner and how often it runs
- Segregation-of-duties review across approvals, payments and reconciliations
- Evidence templates for recurring controls, such as monthly reconciliation sign-off
- A user-access review across your accounting and payroll systems
- Gaps flagged in plain language, with a practical, right-sized fix
- A version-controlled document your team can update as processes change
- A walkthrough call covering every flagged gap before the document is finalized
The process
- 1.
Scoping call
Review current systems, headcount, access setup, and any existing policy documents, even outdated ones, to understand intended versus actual practice.
- 2.
Process interviews
Talk to the person who actually performs each step in close, AP, AR, and payroll, not just their manager's description of the process.
- 3.
Draft the matrix and narratives
Build the control matrix and one-to-two-page narrative per cycle, mapped to the five COSO components.
- 4.
Segregation-of-duties review
Pull actual system permissions from QuickBooks, Xero, NetSuite, or Bill.com and flag any incompatible access combination by name.
- 5.
Team review round
Send the draft back to the people interviewed to correct anything that does not match how they actually work day to day.
- 6.
Finalize and version
Lock the reviewed document, log the version and date, and walk your controller or CFO through each flagged gap with a proposed fix.
- 7.
Ongoing updates
Revise the document when a role changes, a system is replaced, or a new process is added, so it stays current between audit cycles.
Software
QuickBooks Online, Xero, NetSuite, Bill.com, Excel, Gusto
Quality control
The work runs inside Excel, QuickBooks Online, Xero or Bill.com, the file stays under your own subscription, and a senior reviewer checks the output before it reaches you.
Pricing
Internal controls documentation is scoped once we know how many process cycles and systems are in play; it runs separately from ongoing monthly bookkeeping. Current published tiers and add-ons are on the /us/pricing rate card, and your exact fee for this engagement is confirmed in writing before work starts.
Finbryn is a brand of Northlane Solutions Inc., a Delaware corporation.
Reviewed September 2026