Krishna Priyan

Business Processes & Internal Controls

Process Audit & Control Design by Krishna Priyan

The Cost of a Missing Signature: Why One Approval Can Delay ₹50 Crore Worth of Inventory

Meta Title: The Cost of a Missing Signature | How One Approval Delay Can Disrupt Business Operations | Krishna Priyan Meta Description: A missing signature is more than a compliance issue. Discover how one delayed approval can impact inventory, production, suppliers, customers, and revenue, and why internal controls are critical for business continuity. The Cost of a Missing Signature When people think about a missing signature, they usually think about legal consequences. An unsigned contract. An incomplete invoice. An audit observation. A compliance issue. But the real cost of a missing signature is rarely legal. It’s operational. A single missing approval can quietly bring an entire business process to a standstill. Imagine this. A manufacturing company has ₹50 crore worth of raw materials waiting to be released from the warehouse. The trucks are ready. Production has been scheduled. Customers are expecting deliveries. Employees are prepared. But one approval is missing. Nothing moves. Not because the company lacks inventory. Not because machines have failed. Not because suppliers are late. Everything stops because one signature never arrived. That is the hidden cost of weak process design. A Signature Is More Than Ink Most organizations treat signatures as administrative formalities. They are seen as proof that someone reviewed a document. But operationally, a signature is much more than that. It is a decision. It is permission. It is accountability. It is the trigger that allows the next process to begin. Without that trigger, downstream activities remain frozen. In business, approvals are like green traffic lights. Until they change, everyone waits. The Domino Effect of One Missing Approval Let’s follow the journey of one missing signature. Step 1: Purchase Order Stalls The procurement team prepares the purchase order. Everything is complete. The document simply needs one managerial approval. The manager is travelling. The approval waits. Step 2: Supplier Doesn’t Dispatch Materials Without the approved purchase order, the supplier cannot release goods. Production planning begins to shift. No one is worried yet. “It’s only one day,” someone says. Step 3: Inventory Doesn’t Arrive Manufacturing now lacks critical raw materials. Machines remain idle. Employees wait. Production schedules change. The delay has moved beyond procurement. Step 4: Customer Orders Slip Finished goods cannot be produced. Delivery commitments are missed. Customers begin asking questions. Sales teams spend their day explaining delays instead of building new business. Step 5: Revenue Is Delayed The product isn’t delivered. The invoice isn’t raised. Cash isn’t collected. Revenue recognition shifts into the next reporting period. All because one approval was delayed. The signature itself had no financial value. Its absence created enormous operational cost. The Most Expensive Signature Is the One That Never Happens Organizations often measure the value of approvals by the documents they authorize. They rarely measure the value of time. But time is often the most expensive resource in business. Consider the cost of a delayed approval: None of these appear beside the signature box. Yet every one of them may exist because that box remained empty. Why Businesses Create Approval Bottlenecks Approval delays usually aren’t caused by careless managers. They are caused by poorly designed processes. Common examples include: Every unnecessary approval increases operational friction. The goal of internal controls isn’t to create more approvals. It’s to create the right approvals. Internal Controls Should Accelerate Good Decisions Many employees believe internal controls slow business. The opposite is true. Poorly designed controls slow business. Well-designed controls make decisions faster because everyone knows: Clarity reduces waiting. Confusion creates bottlenecks. Think of Approvals Like Traffic Signals Imagine a busy city where every traffic signal stops working. Cars don’t suddenly move faster. Intersections become chaotic. Drivers hesitate. Congestion increases. Accidents become more likely. Business approvals work the same way. Approvals regulate process flow. Too many unnecessary approvals create traffic jams. Too few approvals increase risk. The objective is balance. Efficient organizations design approval workflows that protect the business without restricting it. The Hidden Cost No Financial Statement Shows Financial statements measure expenses. They measure revenue. They measure assets. They don’t measure waiting. Yet waiting is one of the largest hidden costs in many organizations. How much productivity disappears while employees wait for approvals? How many customer orders remain pending? How much inventory sits unused? How many suppliers postpone deliveries? These operational delays rarely appear in accounting reports. Internal auditors, however, are trained to see them. Technology Eliminates Approval Delays Modern organizations no longer rely solely on physical signatures. Digital workflows have transformed approval processes. Today’s ERP systems can: Technology doesn’t remove accountability. It removes unnecessary waiting. The result is faster decision-making and stronger internal controls. Internal Audit Looks Beyond the Signature Traditional auditing asks: “Was the document signed?” Modern internal auditing asks: This shift changes internal audit from a compliance activity into a process improvement function. The objective isn’t to collect signatures. It’s to improve business flow. When One Signature Delays ₹50 Crore Imagine again the warehouse containing ₹50 crore worth of inventory. Nothing is wrong with the inventory. Nothing is wrong with the warehouse. Nothing is wrong with production. The only problem is that one approval remains pending. Employees continue waiting. Customers continue waiting. Revenue continues waiting. The signature itself costs nothing. The delay costs everything. Questions Every Organization Should Ask Every leadership team should periodically evaluate its approval process. Ask questions such as: Sometimes removing one unnecessary approval improves efficiency more than adding ten new controls. Final Thoughts A signature is one of the smallest actions in any business process. It takes only a few seconds. Yet those few seconds often determine whether millions of rupees continue flowing through the organization—or remain trapped in operational limbo. The real cost of a missing signature isn’t a compliance observation. It isn’t a legal concern. It’s the production line that never started. The supplier who stopped trusting you. The customer who cancelled an order. The cash flow that arrived too late. The revenue that shifted to another quarter. Great organizations understand that approvals should never become obstacles. They should become enablers. Because the

The Cost of a Missing Signature: Why One Approval Can Delay ₹50 Crore Worth of Inventory Read More »

If Internal Controls Were Airport Security: A Lesson Every Business Can Understand

Most people hear the words internal controls and immediately think of paperwork, approvals, compliance, and audits. It sounds technical. Complicated. Sometimes even unnecessary. But imagine this instead. You’re about to board an international flight. As you walk through the airport, you encounter a series of checkpoints. Your passport is verified. Your baggage is scanned. Your boarding pass is validated. Security officers inspect your belongings. The boarding gate confirms your identity one final time. Each checkpoint adds a few minutes to your journey. Yet no one complains that airport security is unnecessary. Why? Because everyone understands the purpose. The goal isn’t to make travel difficult. The goal is to ensure everyone reaches their destination safely. Internal controls work exactly the same way. Their purpose isn’t to slow business. Their purpose is to protect it. Every Control Exists for One Simple Reason Imagine an airport with no security. Anyone could enter the runway. Passengers could board the wrong aircraft. Dangerous items could enter the cabin. Unauthorized individuals could access restricted areas. Chaos wouldn’t happen every day. But the risk would increase dramatically. Businesses face the same challenge. Without internal controls: Controls don’t guarantee perfection. They reduce the probability of failure. Passport Verification = Employee Authentication The first checkpoint at any airport verifies identity. Are you really the person named on the ticket? Businesses ask the same question every day. Who is accessing the ERP system? Who approved this transaction? Who modified this financial record? Strong user authentication—including passwords, multi-factor authentication (MFA), and role-based access—is the business equivalent of checking a passport before allowing someone to proceed. No identity. No access. Boarding Pass Validation = Authorization Controls Having a passport isn’t enough. You also need a valid boarding pass. The airport verifies whether you’re authorized to board that specific flight. Organizations should follow the same principle. Just because an employee works for the company doesn’t mean they should approve every transaction. Authorization controls ensure that: Authentication answers “Who are you?” Authorization answers “What are you allowed to do?” Baggage Scanning = Transaction Review Airport scanners don’t assume every bag contains dangerous items. They simply verify. Most bags pass without issue. Occasionally, something unusual appears. Internal audit works similarly. Transaction reviews don’t assume fraud. They identify unusual transactions that deserve attention. Examples include: Scanning isn’t about suspicion. It’s about verification. Security Screening = Segregation of Duties Imagine if one airport employee could: Would you feel comfortable? Probably not. Responsibilities are separated because concentration of authority creates risk. Businesses need the same approach. No single employee should be able to: This principle is called Segregation of Duties (SoD). It is one of the strongest internal controls any organization can implement. CCTV Cameras = Continuous Monitoring Walk through any airport and you’ll notice cameras everywhere. They don’t stop incidents by themselves. They create accountability. People behave differently when activities are visible. Businesses achieve the same effect through: Monitoring doesn’t imply distrust. It encourages responsible behavior. Restricted Areas = Access Controls Not everyone can enter the control tower. Not everyone can access the baggage handling area. Not everyone can walk onto the runway. Access depends on responsibility. Organizations should apply the same logic. Employees should only access information necessary for their roles. Finance shouldn’t automatically access HR payroll records. Sales shouldn’t modify accounting entries. IT administrators shouldn’t approve financial transactions. Good access control minimizes unnecessary exposure. Random Security Checks = Surprise Audits Sometimes airport security selects passengers for additional screening. Not because they’re guilty. Because unpredictability strengthens deterrence. Internal audits often work the same way. Routine audits establish consistency. Unannounced reviews reinforce accountability. Employees are more likely to follow procedures when they know compliance may be reviewed at any time. Flight Control Tower = Corporate Governance Passengers rarely think about the control tower. Yet every aircraft depends on it. The control tower oversees the entire airport ecosystem. It coordinates movement, manages risks, and prevents collisions. Corporate governance performs the same role. The Board of Directors, Audit Committee, senior management, and Internal Audit work together to ensure that business decisions align with strategy while risks remain within acceptable limits. Governance doesn’t operate the business. It guides it. Emergency Procedures = Business Continuity Planning Every airport prepares for emergencies long before they occur. Fire drills. Medical emergencies. Runway closures. Power failures. Aircraft diversions. These plans may never be used. But when they are needed, preparation makes the difference. Organizations require the same discipline. Business Continuity Planning (BCP) ensures operations continue during: Resilient organizations prepare before emergencies happen. Why Good Controls Feel Invisible Most passengers complete airport security without thinking much about it. Everything simply works. The same should be true of internal controls. Employees shouldn’t constantly struggle against controls. Well-designed controls are embedded into daily operations. Approvals happen automatically. Access is granted appropriately. Exceptions are flagged immediately. Risks are identified early. Good controls become part of the process rather than obstacles to it. What Happens When One Checkpoint Fails? Imagine skipping baggage screening. Or allowing unrestricted runway access. Or letting passengers board without identity verification. One missing checkpoint could compromise the safety of thousands. Businesses experience similar chain reactions. One missing approval may lead to an unauthorized payment. One excessive system privilege may enable fraud. One missed reconciliation may hide financial errors. One ignored exception may become tomorrow’s audit finding. Every control protects the next stage of the process. The Airport Lesson Every Leader Should Remember Airports don’t rely on a single security measure. They rely on multiple layers. Identity verification. Access control. Scanning. Monitoring. Governance. Emergency planning. Each layer compensates if another fails. This concept is known as layered defense. Strong organizations build internal controls the same way. No single control should carry the entire burden of protecting the business. Final Thoughts Internal controls often receive criticism because they’re seen as slowing down business. Airport security teaches us a different lesson. The safest journeys aren’t created by removing checkpoints. They’re created by designing checkpoints that are efficient, intelligent, and proportional to the risk. Businesses should think the

If Internal Controls Were Airport Security: A Lesson Every Business Can Understand Read More »