A Quality Control Checklist for Accounting Firms: The Items Most Files Are Missing

Most quality problems in a client file are not caused by a lack of skill. They are caused by a step nobody was ever assigned. The work gets done, the financials go out, and the gap only surfaces years later: a file that cannot be restored, a liability account that has been wrong since 2023, or a prior period that quietly changed after the return was filed.

None of the items below are advanced. Every one of them gets a nod of agreement when raised. Very few firms actually have them running. This is the checklist, grouped so it can be split between a file setup routine, a monthly close routine, and an annual review.

1. Backups, including for cloud software

The most common assumption in the profession right now is that cloud accounting software removes the need for backups. It does not. The vendor protects its own infrastructure. It does not protect the file from what happens inside it: a bulk delete, a reclassification run against the wrong date range, a departing bookkeeper, or a merge that cannot be undone.

• Cloud files need a real backup. QuickBooks Online has a built-in online backup and restore feature on the higher tiers and through accountant access, and there are established third-party tools for the same purpose. Either is fine. Having none is the problem.
• Desktop backups sitting on the same machine are not backups. If the company file and the backup are on one computer, one hardware failure takes both. One copy should be off the machine.
• Test a restore. A backup that has never been restored is a guess. Restoring one file a year, to confirm the process works and somebody knows how to do it, is enough.
• Export before offboarding. When a client leaves, access disappears and the working history goes with it. A full report pack, general ledger detail, and the trial balance for every year worked should be exported while access still exists.
• Pull source documents out of portals. Bank and merchant portals purge older statements, often after eighteen to twenty four months. Statements, loan documents, and payroll registers should live in the firm's own document system, not in a portal the firm does not control.
• Archive payroll registers before a provider change. Once a client moves from one payroll platform to another, historical registers frequently become unreachable. Download the full history at the point of switching.

2. The accounts nobody reconciles

Almost every firm reconciles bank accounts. Fewer reconcile credit cards with the same discipline. Very few reconcile anything else, and that is where most balance sheet errors live, because nothing forces them to surface.

A reconciliation simply means tying the general ledger balance to an outside source. Every account below has one.

Two of these are worth singling out. Payroll clearing and Undeposited Funds are treated as throwaway accounts in a large number of files, and both should behave like bank accounts: items go in, items come out, and the balance is explainable at any point in time. A payroll liability balance that grows month after month, or an Undeposited Funds balance carrying items from two years ago, is not a small formatting issue. It means the underlying transactions were recorded twice or never cleared, and the P&L is affected too.

The other is Opening Balance Equity. It exists as a temporary holding account during setup and should be cleared immediately. A file where it still carries a balance years later has never had its opening position properly established.

3. File controls that take minutes to turn on

These are settings and habits rather than work, which is exactly why they get skipped.

• Set a closing date with a password. Without one, any user can change a prior period, which means filed financials and filed returns can stop matching the books without anyone noticing. This is the single highest-value setting in the file.
• Review the audit log after significant work. Particularly after a cleanup, after onboarding, or when a balance moves without explanation. It answers who changed what, and it is the fastest diagnostic available.
• Give every person their own login. Shared logins remove the ability to trace anything, and they make removing access at the end of an engagement impossible to do cleanly.
• Turn on multi-factor authentication on accounting software, email, and banking access. Email is the account that matters most, because it is the route to resetting everything else.
• Remove access when people leave. Departed staff, and prior accountants, routinely retain live access to client files for years. An access review once or twice a year across the client base catches it.
• Drive the holding accounts to zero. Uncategorized income, uncategorized expense, and "Ask My Accountant" should be empty before financials are issued. They are a queue, not a category.
• Clean up duplicate accounts, vendors, and customers. Two versions of the same vendor split reporting in half and make any spend analysis wrong.
• Audit automation rules. Bank rules and auto-categorization are useful until a stale rule quietly miscodes for six months. Any rule that exists should be reviewed periodically, and rules built in a client's file should not be left behind as someone else's problem.

4. Documentation, so the work survives the person who did it

The test for every item here is simple: if the person who did the work is unavailable, can someone else reconstruct what happened and why?

• A written close checklist per client. Without one, quality depends entirely on who happened to do the close that month. With one, the output is the same regardless.
• A memo and support on every journal entry. An entry with no description and nothing attached is unreviewable a year later, including by the person who posted it.
• A permanent file per client. Entity type, ownership percentages, state registrations, accounting method, elections made, and prior-year financials. This is the information that gets asked for urgently and reconstructed from memory.
• A workpaper behind every balance sheet line at year end. Every account on the balance sheet should have a schedule supporting it. If any line cannot be supported, that is the line that will cause a problem.
• Engagement scope updated when the work changes. Scope creep that never makes it into writing is where most fee disputes begin.
• A log of what the client provided and when. Without it, a delay caused by missing information becomes the firm's fault by default.
• A record of prior-period adjustments. Any entry touching a closed period should be logged and passed to whoever prepares the return, before the work continues rather than after.

5. Small operational habits with outsized effect

• Check period cutoff. Invoices and bills dated into the wrong period are one of the most common and least detected errors, and they distort two months rather than one.
• Agree cash or accrual in writing. When it has never been settled, the P&L can quietly mean something different from one month to the next, and nobody can explain the movement.
• Do a variance scan before delivering. Compare the month to the prior month and the prior year and look at anything that moved sharply. It takes a couple of minutes and catches most posting errors before the client sees them.
• Send financials with a short note. Two or three lines on what moved and why turns a set of numbers into something the client can act on. Statements delivered with no commentary invite the question anyway.
• Do not let access live in one person's head. Logins, client contacts, and file locations held by a single individual are a real operational risk. A password manager and a written client list solve it.

Where to start

Trying to adopt all of this at once will fail. A workable sequence:

1. This week: set closing dates with passwords, turn on multi-factor authentication, and run an access review to remove anyone who should no longer be in a client file.
2. This month: confirm a backup exists for every client file, cloud and desktop, and restore one to prove the process works.
3. Next close: add payroll liabilities, Undeposited Funds, clearing accounts, and sales tax payable to the reconciliation list alongside the bank accounts.
4. This quarter: write the close checklist for one client, run it, and then copy it across the rest.
5. Before year end: a workpaper for every balance sheet account, and Opening Balance Equity at zero.

The pattern behind all of it is the same. Each item is an account or a step that has no outside source forcing it to be correct, so it stays wrong until somebody looks. Most of what gets called a messy file is really an accumulation of items from this list, left unattended for a few years.

That accumulation is also what makes a cleanup hard to price. If your firm has inherited a file where several of these have never been done, the findings-first approach in how to scope a cleanup before you quote it is the place to start, and this hours model turns those findings into a number. BooksCaughtUp does that diagnostic work for firms and returns a findings list on every balance sheet account, so the quote comes from facts rather than an estimate.