Building a Culture of Strong Internal Controls

Increasing Organizational Buy-in When Building a Culture of Strong Internal Controls

By on Apr 18, 2022


Audience watching speaker lead presentation

Whenever you’re implementing a big change in an organization—whether it’s strengthening internal controls or implementing a new software system—it is critical to have a strategy and get buy-in across all areas of the organization. Do not rely on a few decision makers if you want a smooth transition.

Change is hard and building a strong internal controls structure in your nonprofit when there has not been one previously takes time. That’s why I want to spend some time talking about building habits and values throughout all levels of the organization to increase organizational buy-in.

Here are seven practices for building an internal control structure that will increase buy-in and stand the test of time.

1. Strive for integrity and transparency.

A single lie destroys a whole reputation of integrity.—Baltasar Gracián

Demonstrating integrity and transparency starts at the highest levels of the organization and flows down layer by layer. Senior management and the board set the “tone at the top.” This is where the expectations for the organization are set and reinforced. Without integrity and transparency from the highest level, even the most committed employee will become discouraged and disillusioned.

A strong first step in building this practice is to communicate consistently, starting with the hiring process, that integrity and transparency are valued by the organization and expected of the employees.

2. Set clear expectations.

It is easier to prevent bad habits than to break them.—Benjamin Franklin

Clarity, like common sense, is often an elusive quality in today’s busy environment. One simple way to make sure everyone is clear about what is expected of them is to ask questions. For example:

  • Does John know who is responsible for completing this control activity?
  • Is Jane clear that Joe must authorize this purchase order before the purchase is made?
  • If there is a concern about compliance, who should be contacted to resolve the issue?

In other words, does each employee know:

  • What is expected of them?
  • What they expect of each other?
  • What can they expect from management?

Setting clear expectations up front will smooth the implementation, support needed improvement, and integrate multiple levels of staff into the process of strengthening internal controls.

3. Build relationships for organizational buy-in.

Trust is the glue of life. It’s the most essential ingredient in effective communication. It’s the foundational principle that holds all relationships.—Stephen Covey

In the same way external stakeholders need to trust the organization, employees must also believe in the change—or at a minimum, not resist the change—to increase organizational buy-in.

Here are five tips for building relationships and increasing trust:

  • Make sure words and actions align
  • Communicate a consistent message
  • Deliver on promises
  • Demonstrate respect for others
  • Nurture open communications

Investing time in developing stronger relationships will pay dividends in trust and grease the wheels of buy-in to strengthen internal controls.

4. Follow through with commitments.

You must be the change you wish to see in the world.—Mahatma Gandhi

Integrity is a key component of building and maintaining trust. And a nonprofit that follows through with commitments is building a culture of integrity ready to support strong internal controls.

Here are three ways to follow through with commitments:

  • Delegate effectively.Encourage a culture where people can make decisions, are trusted to use good judgement, and have the discernment to know when to ask more questions before acting.
  • Confirm the objective is understood.Clear communication is a two-way process, and it is easy for instructions and goals to be misunderstood. Check to make sure everyone is on the same page, and it is agreed upon who is responsible for taking the next step.
  • Promote ownership.This means bearing the risks and benefits of actions. An ownership culture recognizes the importance of both accountability and reward for making good decisions and implementing them as well.

5. Educate others.

Training is everything. The peach was once a bitter almond; cauliflower is nothing but cabbage with a college education.—Mark Twain

Education is really communication in disguise. Too often we assume people know what to do when they have received little or no guidance on what’s expected of them. For people to support strengthening of internal controls they must first understand what that means and how supporting the implementation, improvement, and integration of these activities is relevant to their jobs.

If you are committed to building trust by strengthening internal controls, what is your plan to educate others?

6. Communicate consequences.

You cannot escape the responsibility of tomorrow by evading it today.—Abraham Lincoln

The same way an internal controls structure without sufficient monitoring is wishful thinking, not reality, getting organizational buy-in without communicating consequences is expecting results with a key part missing.

When things are broken, they need to be fixed. There must be a price to pay when policies are ignored or circumvented, and everyone needs to understand that misbehavior will have real consequences.

7. Reward improvement.

Success is simple. Do what’s right, the right way, at the right time.—Arnold H. Glasow

Finally, just like there are consequences for not adhering to the requirements of a strong internal controls structure, there should also be positive reinforcement when improvement is observed. Take time to celebrate the victories when trust grows, people do what they are supposed to, and problems are detected and corrected.

  • Recognize individuals and department
  • Celebrate the wins
  • Encourage others to model similar behavior

It’s never too late to catch someone doing something right!

Keep your nonprofit culture (and internal controls) current

A culture of strong internal controls regularly evolves as your processes change. Adhering to outdated standards can get in the way of innovation. Be sure to review your internal controls on a regular basis to make sure they reflect your current purpose and technology.

If you are ready to update your internal controls for today’s environment, check out our recorded webinar, Internal Controls in a 2022 World


This article has been updated since its original May 2017 publish date.


The “Federal Grant Insider” Lucy Morgan delivers straight talk with a sense of wisdom and humor. She is a CPA, MBA, GPA Approved Trainer, Speaker, Author of 3 books including “Decoding Grant Management- The Ultimate Success Guide to the Federal Grant Regulations in 2 CFR Part 200” and “The Diamond Mindset” an Amazon ranked best-seller.  Lucy is a leading authority on Federal grant management for non-profits, institutions of higher education and state, local and tribal governments.  She has written over 200 articles on grant management topics which are featured in LinkedIn, various E-zines and on the blog.

Comments (4)

  • pilar montilla says:

    Dear Lucy,
    I am writing you from Italy. I have a question and I would like to know the opinion of an expert like you:

    I work for a nonprofit organization. We conduct basic science research projects. We receive a grant with a budget that includes (50’000 salaries personnel Postdoc). For the first six months, we were not able to find a right candidate with the skills we were looking for. However, the work was conducted by the PI with the support of the rest of his team (any of them were Postdoc). For the next six months, we found the right person and we signed a contract of 25’000. Since we complete all the activities that were planned by the grant, can we claim the 50’000 that were included in the budget for personnel?

  • Cammi Derr says:

    Great information. We are dealing with fundraiser issues now and trying to get them back on track. Lately dealing with constant whining and resentments but I’m optimistic that in 2 months, things will settle down.

  • Becky says:

    These are helpful suggestions. I would love to hear more from those who have successfully bridged the gap between their DBA team and end users!

  • Rosalinda Miguel says:

    Setting clear expectations to staff and external stakeholders is very important. Thanks for this article, it was a good read!

Leave a Reply

Your email address will not be published. Required fields are marked *