Internal investigation bookkeeping

A preserved, dated copy of the relevant accounting file, set aside from any ongoing bookkeeping work for the duration of the investigation. A chain-of-custody log recording every document pulled into the investigation file, when, from where, and by whom. Relevant transaction history organized around the scope the board, owner or counsel set, and a summary schedule presenting the findings in a form a board or audit committee can act on without wading through the full underlying file.

We start with a scoping conversation covering which accounts, which time period, and which individuals or transactions the investigation covers, set by whoever opened it. A preserved copy of the accounting file is set aside immediately, before any detailed review begins, so the starting point of the investigation is locked in and dated. Documents pulled into the investigation file are logged as they come in. Findings get organized into a summary schedule as the review proceeds, with the underlying preserved file and log available for anyone who later needs to verify how a conclusion was reached.

A board or audit committee that has received a complaint, a whistleblower tip, or an auditor's flag and needs the financial side of an investigation handled by someone independent of day-to-day bookkeeping. A business owner who suspects an employee or a partner but wants the review handled carefully before anyone is confronted. And counsel who has opened an internal investigation on a client's behalf and needs the underlying bookkeeping work organized to a standard that will hold up if the matter is later reviewed by a regulator or an outside auditor.

An investigation started by simply pulling reports out of the live system with no separate preserved copy, leaving no way to prove later what the records looked like on day one. A scope that was never written down, so different people involved in the review have different ideas of what is actually in bounds. Documents gathered informally, an email here, a spreadsheet there, with no log of who pulled what and when, which becomes a problem the first time an outside party asks how the investigation file was assembled. And regular bookkeeping continuing to touch the same records under review, which can raise a question later about whether the investigation record was affected by unrelated activity.

Investigation bookkeeping runs against whichever system the business already uses, most often QuickBooks Online or Xero, with the preserved copy exported and set aside rather than reviewed live inside the day-to-day file. Microsoft Excel is where the chain-of-custody log and the summary schedule for the board or audit committee get built, kept as a running document throughout the engagement rather than assembled only at the end.

Internal investigation bookkeeping is scoped and quoted per engagement, based on how many accounts and how long a period the scope covers, and whether ongoing bookkeeping needs to continue in parallel through a separate part of the team. A narrow, single-account review over a few months costs less than a multi-entity review spanning several years. We quote in writing once the board, owner or counsel has set the scope, and flag before proceeding if findings suggest the scope, and the cost, should expand.

The standard is whether the preserved file, the chain-of-custody log and the summary schedule together could withstand review by an outside auditor, a regulator or opposing counsel without a gap in the record. A senior reviewer reviews the summary schedule before it reaches the board or audit committee, checking that every finding traces back to a logged document in the preserved file.

The single biggest risk to an internal investigation's credibility is blending it with the routine bookkeeping still running the business day to day. We keep the two functionally separate: a different part of the team handles ongoing entries, the preserved investigation copy is never touched by that ongoing work, and access to the preserved file is limited and logged. That separation is what lets the eventual findings stand on their own if the matter is ever reviewed outside the company.