Dual control and segregation of duties in board financial governance
July 13, 2026 · 4 min read
Most association embezzlement cases share a pattern: one person controlled the money end to end, with no second set of eyes and no separation between the person who could move funds and the person who reconciled the account. The two controls that break that pattern are dual control and segregation of duties. Neither is complicated, and both are largely a matter of how a board sets up its bank accounts and its month-end routine.
Dual control: no single person moves money alone
Dual control means a financial transaction requires two authorized people to complete it. The classic version is the two-signature check, but the concept applies to every way money leaves the account:
- Checks above a threshold require two signatures.
- Wires and ACH transfers require one person to initiate and a different person to approve before the bank releases the funds.
- New payees are set up by one person and approved by another before any payment can be sent.
The point is that no single individual, not the treasurer, not the manager, not a bookkeeper, can move association funds without a second authorized person seeing and approving it. Dual control does not assume anyone is dishonest. It removes the opportunity, which is what protects both the funds and the honest people who handle them.
Segregation of duties: split the money-handling roles
Segregation of duties means the tasks around money are divided among different people so that no one person handles a transaction from start to finish. The three functions to keep separate are:
- Authorizing a payment (approving that a bill should be paid).
- Handling the money (signing the check, releasing the transfer, making the deposit).
- Recording and reconciling (booking the transaction and reconciling the bank statement).
When one person authorizes, pays, and reconciles, they can hide a diversion by adjusting the records to match. Split those roles and a discrepancy has to show up somewhere, because the person reconciling the statement is not the person who moved the money.
In a small association with a volunteer board, perfect separation is not always possible. The realistic goal is to break the most dangerous combination: never let the same person both move money and reconcile the account that money came from.
How the bank makes this practical
A board does not have to enforce these controls by willpower. Much of it is configured at the bank:
- Transaction approval workflows for ACH and wires, so a second approver is required by the system, not by a policy nobody checks.
- Role-based online banking access, so view-only, initiate, and approve are separate permissions assigned to different people.
- Alerts and read-only access for the board, so trustees can watch the accounts without being able to move funds.
- Positive pay to catch altered or unauthorized checks before they clear.
Banks that serve community associations tend to offer these as standard treasury features. A bank that cannot separate initiate from approve, or cannot give the board read-only visibility, is making good governance harder than it needs to be.
The board's role
Controls only work if the board maintains them. Review who has access to the accounts at least annually, confirm the dual-control settings are still in place after any staffing change at the management company, and make sure at least one board member reviews the reconciled statements independently. These habits, paired with the right bank setup, prevent the situation that shows up in nearly every association fraud case.
If you would like to compare banks that offer the treasury controls associations need, tell us about your association. Free for boards.