Why You Should Never Let an Employee Handle Both Sales and Stock (And How to Enforce Segregation of Duties with Login Permissions)

The One-Person Temptation

Your shop assistant, Mary, is fantastic. She handles customers, processes sales on the M-Pesa Till, and also receives deliveries and updates the stock book. She's a one-person dynamo. But this concentration of duties is the single biggest internal control weakness in a Kenyan SME. It's not that Mary is dishonest. It's that the system makes it too easy for dishonesty to occur.

Internal fraud thrives where one person controls both the recording of sales and the recording of stock. A Business Management Dashboard enforces Segregation of Duties (SoD) through role-based login permissions, making it much harder for theft to go undetected.

Why One Person Shouldn't Do Both

If Mary can process a sale AND update the stock, she can:

• Sell an item, pocket the cash, and not record the sale (the stock count will be wrong, but she controls that too, so she can adjust it).
• Receive a supplier delivery, record fewer items than actually arrived, and take the extra stock home.
• Issue unauthorised "discounts" and cover the discrepancy with a stock adjustment.

How to Enforce SoD with Login Permissions

Role 1: Sales Clerk

This login allows the user to:

• Process sales (record an order, receive M-Pesa or cash).
• Print receipts.
• Cannot: Adjust stock levels, void transactions (or limited voids with manager approval), or access supplier records.

Role 2: Stock Controller

This login allows the user to:

• Receive supplier deliveries and update stock levels.
• Perform stock takes and adjust inventory (with manager approval for large adjustments).
• Cannot: Process sales, access the till, or issue refunds.

Role 3: Manager / Owner (Oversight)

This login allows:

• Full visibility of all transactions and stock movements.
• Approval of voids, large discounts, and significant stock adjustments.
• Access to segregation of duties reports (e.g., "Transactions where Sales Clerk also adjusted stock" – which should be zero).

The Small Team Exception

If you only have two employees, strict SoD is difficult. In that case, the dashboard provides the oversight layer: any transaction where the same person handled both sale and stock is flagged in a daily "SoD Exception Report." The owner reviews these flagged transactions every evening. The knowledge that the owner is reviewing exceptions acts as a powerful deterrent.

Segregation of duties is not about mistrust. It's about building a system that protects honest employees from temptation and protects your business from loss.

Set Up Role-Based Permissions →