Remote Working, and What It Does to Financial Control

What informal supervision was actually doing

In an office, a lot of control happens without anyone designing it.

You see who is at their desk. You overhear a call that sounds wrong. Someone glances at a screen. A document gets passed across a desk and read on the way.

None of that is written down as a control and all of it was doing work. Remove it and you have to replace it deliberately.

What to replace it with

Approval in the system, not by message.

Approvals over chat and email leave no reliable audit trail and are trivially impersonated. Put approvals in the accounting system where they are recorded with a user and a timestamp.

The bank detail rule becomes essential.

Any change to a supplier's bank account verified by phone, on a number you already held. This mattered in an office. It is critical when the request arrives as a message from someone you cannot see.

Voice verification for payment requests.

Any payment request arriving by email or chat gets verified by voice, regardless of who appears to have sent it, with no exception for urgency.

Chief executive impersonation attacks work best against distributed teams for obvious reasons.

Access rights reviewed, not assumed.

Remote setups accumulate access. Review who can post journals and who can release payments, quarterly.

The UAE questions people forget

Where is the work actually being done? If staff work from another country for extended periods, there are visa, employment and potentially tax questions. Substance and residence are not decided by where a contract was signed.

Where is your data? If your accounting data sits with a cloud provider, know where and under what terms.

What does the contract say? Employment arrangements that assumed office attendance may not describe what is happening.

None of these are reasons not to do it. They are reasons to ask before rather than after.

What works better remotely

Reconciliation, reporting and technical work. All of it is document and system based and none of it needs a room.

What works less well

Training juniors, which happens by proximity more than by instruction.

Noticing that something is wrong, which is the informal supervision problem above.

The practical position

Remote finance work is fine, provided the controls that were informal become explicit.

The failure mode is not remote working. It is remote working with controls that assumed an office and were never rewritten.

Where we fit

We work with clients remotely by default and we test control operation in audit work. If your approvals still happen over chat, that is the first thing to move.