Protecting Your Law Firm From Theft

By John W. Olmstead, MBA Ph.D CMC


During the past 25+ years that I have been working with law firms I have been amazed at the number of embezzlements caused by unscrupulous attorneys, bookkeepers, office managers and other staff members. And yes – even partners. One out of five law firms in my client sample has actually lost funds due to some form of embezzlement and caught the offenders.  While some of the firms have prosecuted and taken other actions against the offenders the process was very painful, time consuming, and typically the funds are never recovered in entirety. Of course, this is if you catch the offenders.

 Many small firms’ internal control procedures are so lax that funds could be lost through embezzlement and the firm would not even know it.

 Only through effective internal accounting and financial controls can law firms protect their offices from theft. The goal is not to catch offenders – but to have a system in place that discourages and prevents the theft from occurring in the first place.

 The process involves implementing internal accounting and financial controls. In essence – segregation of duties. Here is an overview of such a system:    

            Internal Control is the plan of organization and all of the coordinate methods and measures adopted within a business organization to safeguard its assets, check the accuracy and reliability of its accounting data, promote operational efficiency, and encourage adherence to prescribed managerial policies.

 The four basic elements considered essential in a satisfactory system of internal control are:

  1.  A plan of organization that provides appropriate segregation of functional responsibility and duties. 
  2. A system of authorization and record procedures adequate to provide reasonable accounting control over assets, liabilities, revenues, and expenses. 
  3. Sound practices to be followed in performance of duties and functions of each of the organizational areas. 
  4. A degree of quality of personnel (competency) commensurate with responsibilities.



  1.  Have someone other than the bookkeeper open the mail. (i.e. receptionist) 
  2. Have the person who opens the mail prepare a list of all checks/cash received in duplicate. 
  3. Have person responsible for mail route one copy of the check/cash list to the office manager or managing partner and the other copy along with checks/cash to person responsible for making the bank deposit. 
  4. Assign someone responsibility for preparing the deposit and taking it to the bank. This person should verify the check/cash list against checks and cash, prepare deposit slip and make the bank deposit. 
  5. Upon return from the bank the deposit clerk should provide the bookkeeper with the deposit slip, receipt from the bank, and the check/cash list. 
  6. Bookkeeper enters the deposit into the computer system. 
  7. Office manager runs and mails monthly statements – not invoice fee bills – to clients.


  1.  Don’t give bookkeeper check signing authority. 
  2. Have someone other than bookkeeper approve vendor invoices. Require evidence of approval on all invoices. 
  3. Require purchases to be handled by someone other than the bookkeeper and the individual who approves vendor invoices for payment.


  1.  Obtain adequate fidelity bonding insurance coverage. 
  2. Rotate duties when possible. 
  3. Have bank statements mailed to managing partner’s home. He/she should bank statements and transactions and then give to someone other than bookkeeper and other personnel involved in processing receipts or disbursements. Some firms have their outside accounting firm perform this function. 
  4. Reconcile all bank accounts monthly. 
  5. Insure that adequate record retention systems are in place. 
  6. Formulate policies that provide for reasonable protection of assets. 
  7. Insure that adequate personnel selection methods, training programs,  supervision practices, and performance evaluation techniques conducive to control, providing assurance than an adequate number of employees are available to perform operational duties. 
  8. Insure that vacations are mandatory and contain provisions for competent replacements to perform all of the assigned duties of the vacationing employees. 
  9. Outline job duties in written job descriptions. 
  10. Develop an accounting manual. 
  11. Properly supervise, verify, and follow-up on all operations, people, and systems.

 John W. Olmstead, MBA, Ph.D., CMC, is a Certified Management Consultant and the president of Olmstead & Associates, Legal Management Consultants, based in St. Louis, Missouri. The firm helps law and other professional service firms improve the operations and management of their practices and the lives of their practitioners. The firm, founded in 1984 serves clients across the Globe assisting them with implementing change and improving operational and financial performance, management, leadership, client development and marketing.

Dr. Olmstead’s assignments have covered the spectrum of management issues. However, in recent years most of his time is focused on engagements helping firms with:

Dr. Olmstead is the Editor-in-Chief of “The Lawyers Competitive Edge: The Journal of Law Office Economics and Management,” published by Thomson West. He is currently serving as Past Chair, Illinois State Bar Association Standing Committee on Law Office Management and Economics and as a member of the Legal Marketing Association (LMA) Research Committee. Dr. Olmstead may be contacted via e-mail at Additional articles and information is available at the firm’s web site:

© Olmstead & Associates, 2014. All rights reserved.

Contact Us

  • The best decision when we were considering succession planning was to hire you and your firm. 
  • Curt Tobin
    Tobin & Ramon

Read More Testimonials »