How Do You Segregate Duties in a Store With Only a Few Managers?

By awareretailgroup.com Editorial· Edited by Tom Walsh· Published 2026-10-30

A three-manager store segregates duties when the manager who prepares the deposit never also carries that same deposit to the bank wherever staffing allows; when one closing manager must do both, a deposit-slip log signed off by the district manager covers the overlap. Three managers cannot cover authorization, custody and recordkeeping with three different people for every task. Each overlap that’s unavoidable still needs a named compensating control: an unannounced cash count, a covered vacation, or a district manager’s review of the deposit log.

What does authorization, custody and recording split in a store?

Segregation of duties means dividing key duties among different people so that no one person can both make a mistake, or cause one, and hide it. The GAO Green Book describes the idea as management dividing “key duties and responsibilities among different people to reduce the risk of error, misuse, or fraud,” and separately says management considers the need to separate “authority, custody, and accounting of operations” to reach adequate segregation. In a store, that maps to three questions for every cash transaction: who can authorize it, who physically holds the cash or product, and who records or reconciles it against the point-of-sale system. When a function genuinely cannot be split, UCLA’s Business and Finance Solutions guidance calls for a detailed supervisory review of the related activities as the fallback. Check each transaction against the three questions above; when one person answers all three, that is the opportunity side of the fraud triangle, and the task needs a named control.

Who should do what in a store with only three managers?

Three managers cannot give every duty to a different person, but they can decide in advance which overlaps are acceptable and which need a second control. Withum’s guide to retail store controls, posted in 2014, recommends a periodic blind count by someone other than the cashier, North Carolina’s Local Government Commission calls for back-up keys to each cash supply to stay under dual control at all times, and the Washington State Auditor’s Office recommends management approval for voids or refunds above a set dollar amount. The matrix below assigns each task to a primary manager (SM for store manager, AM for assistant manager, FM for front-end or co-manager) and names the control that covers what that manager should not also do.

The hardest row is the deposit hand-off. NC LGC guidance says someone other than the preparer should carry the deposit to the bank, and Washington’s State Auditor’s Office says another employee or manager should review the deposit’s cash and check composition before it goes to the bank. Both rules assume a second person is available when the deposit leaves the store. A store that genuinely cannot split that hand-off should rely on the deposit-slip log described next, rather than drop the control.

How do you split deposit preparation from taking it to the bank?

The closest guidance for a lone closing manager comes from local-government cash handling and a composite specialty-store case, not a retail chain’s nightly close. The specialty-store case, published in ASIS International’s Security Management, describes a store manager “unsupervised except for the district manager, who visited the store every three or four months,” a gap that preceded a $19,900 theft the manager admitted to when confronted with evidence. Alongside tighter refund authorization, the loss prevention manager added a deposit slip validation log to close other record-keeping gaps: the closing manager notes the day’s register reading, the deposit amount, and who carried it to the bank, and the store manager retains the deposit slip with a sign-off column for the district manager. That log leaves a dated record that someone outside the store’s cash cycle can review the next business day, even when the same manager prepares and carries the deposit.

How do mandatory vacations work as a compensating control?

Banking regulators built the strongest version of this control, and it transfers to a store. The FDIC’s 1995 letter endorsed a policy allowing an uninterrupted absence of “no less than two weeks,” and the Federal Reserve’s SR 96-37 letter still expects “a minimum of two consecutive weeks absence” for employees in sensitive positions, because “most frauds or embezzlements require the continual presence of the wrongdoer.” The control depends on someone else actually doing the absent manager’s work. As Corporate Fraud Handbook (p. 126) puts it, “The purpose of mandatory vacations is lost if the work is allowed to remain undone during the employee’s time off.” The ACFE lists refusal to take vacations among the behavioral red flags with the highest median losses, at $250,000. In a three-manager store, schedule no less than a full week away; two weeks matches the banking benchmark, and covering either means the other two absorb a third manager’s tills, deposits and receiving.

Who should run unannounced cash counts, and when?

The guidance on surprise counts comes from local-government cash handling, not a retail-specific study, and it specifies who should run a count more than how often. North Carolina’s Local Government Commission says “periodic surprise cash counts should be conducted for both change funds and petty cash funds by staff members other than those responsible for the cash,” and in a small organization, “the finance officer or a board member should conduct the surprise cash counts.” For a store, that maps to whichever manager does not hold the till or safe that week, with the district manager or LP running the count once all three managers have rotated through custody. The GAO Green Book frames the underlying habit simply: management “periodically counts and compares such assets to control records.” Keep the timing random. An employee who can predict a count can plan around it.

Why does a small store need compensating controls?

The ACFE’s 2026 Report to the Nations found that smaller businesses experience the highest median fraud losses of all organization sizes, with organizations of more than 10,000 employees a close second. The band follows the whole organization’s headcount, not the store’s, so a three-manager store in a chain of more than 10,000 employees sits in the band just behind the highest. The same ACFE report put the median loss per case at $104,000 and the average at $1,457,000. Corporate Fraud Handbook (p. 55) says of small organizations that “these entities are disproportionately vulnerable to occupational fraud and abuse.” The same book (p. 125) names segregating duties as the leading way to stop cash larceny, the exact control a three-manager store has the least room to apply without pairing it to a compensating control.

How do you document compensating controls so they hold up?

A compensating control that is never written down can be hard for a district manager or auditor to check after a loss. The GAO Green Book ties this to the same principle that allows alternative controls in the first place: when segregation of duties is not practical because of limited personnel or other factors, management “designs alternative control activities to mitigate the risk of fraud, waste, or abuse,” and documents “the performance of control activities and all transactions and other significant events that occur in a manner that allows the documentation to be readily available for examination.” For a three-manager store, that means writing the matrix down, naming who signs the deposit log, and keeping the signed pages where a district manager or an outside auditor can pull them. Pair the written policy with employee theft awareness training that explains why each control exists, so managers can see the reason behind each signature.

• Write down which manager owns each task in the matrix and post it where all three can see it
• Start a deposit-slip log with the register reading, deposit amount, and who carried it
• Set a sign-off column for the district manager or LP contact to review the log
• Schedule mandatory vacations and name, in advance, who covers each manager’s cash and deposit duties
• Keep every signed count sheet and deposit log for the length of your retention policy