Enhancing internal controls to improve risk management

The second article in our 5-part enterprise risk management (ERM) series explores the topic of preventive and detective internal controls. From where to begin to what to consider along the way, see why internal control systems play a critical role in private company ERM.

In many ways, good internal controls are like an air traffic control system—one that moves massive airplanes in and out of crowded jetways and airspace, all day long, with few exceptions. Those tracking systems are not in place to slow down air traffic or prevent planes from flying, but rather to guide the complicated movement of aircraft in a seamless and safe manner.

Private companies and family enterprises should think about internal controls in a similar way. A common misconception is that internal controls compromise agility, when, in many cases, the exact opposite is true. Effective internal controls actually empower better decision-making, as they keep business leaders from relying on inaccurate or incomplete information. If you think about it, almost every important decision leaders make relies on the quality of the information at their disposal. When preventive and detective internal control systems ensure that information is sound, leaders are empowered to make decisions with speed and confidence.