The Change Architect logo The Change ArchitectHumanitarian Governance

Public lesson preview

Financial controls that small teams can actually maintain.

This preview turns control language into routines a small team can operate and a reviewer can test: ownership, evidence, exceptions, procurement, payee changes, reconciliations, warning signs, protected reporting, and improvement.

Lesson flow

Seven parts from governance boundaries to a tested control pack.

OrientationGovernance, ownership, and assurance

Place the board, management, control owners, reviewers, and independent assurance in the right roles. Learn why a control pack cannot prove an organization is fraud-free.

Part 1Control principles for small NGOs

Turn risk into a precise control statement with an owner, frequency, evidence, exception route, reviewer, and test.

Part 2Fraud risk signals

Recognize warning patterns, document them neutrally, protect people and evidence, and use authorized reporting without conducting an informal investigation.

Part 3Segregation in small teams

Separate custody, authorization, recording, and review; where staffing is limited, design visible compensating controls.

Part 4Procurement and documentation

Control planning, competition, conflicts, evaluation, contracting, receipt, invoice matching, payment, and justified exceptions.

Part 5Cash, mobile money, and field payments

Use independent payee verification, reconciliations, advance retirement, payroll checks, exception logs, and management review.

Part 6Final Control Pack

Connect ten control components and test them against an urgent procurement, bank-detail change, and reconciliation-difference scenario.

Starter downloads

Thirteen tools for ownership, evidence, exceptions, testing, and improvement.

CSV checklistControls readiness checklist

Review core controls across approvals, filing, procurement, cash, payroll, bank records, and management review.

CSV matrixApproval and delegation matrix

Define approval thresholds, evidence requirements, exception handling, and review responsibilities.

CSV checklistProcurement file checklist

Track quotation evidence, vendor selection notes, conflicts, delivery checks, and payment support.

CSV logFraud red-flag log

Record warning signs, evidence location, immediate safeguard action, escalation owner, and follow-up status.

CSV planControls improvement plan

Turn control gaps into first-month actions with owners, deadlines, evidence, and management review.

CSV session planFacilitator session plan

A workshop flow for finance controls, anti-fraud basics, and donor-readiness cohorts.

CSV registerFinancial and fraud-risk register

Connect objectives, scenarios, controls, evidence, owners, residual risk, and actions.

CSV test sheetControl test sheet

Review design and operation, record deviations, correct causes, and schedule retesting.

CSV protocolPayee-change verification

Verify requests independently before changing master data or releasing a payment.

CSV registerReconciliation exceptions

Track differences, age, risk, evidence, owner, escalation, and closure.

Restricted templateProtected reporting register

Keep neutral summaries and restricted ownership; do not place identities or case evidence in shared files.

Assessment mapAssessment blueprint

See thresholds, attempts, release controls, assignment evidence, and certificate requirements.

HTML briefFinal Control Pack assignment

Build ten connected components and apply them to three fictional or sanitized scenarios.

Finance boundary

Training is not an audit or investigation.

These materials support practical control awareness and readiness. They do not replace qualified accounting advice, external audit, forensic investigation, donor-specific compliance review, legal advice, or a formal fraud response process. Serious concerns require safe reporting channels, competent procedures, confidentiality, and qualified support.