Internal Controls for Inventory: Counting, Valuation, and SOX

Internal controls for inventory are the policies, procedures, and system safeguards a company uses to keep the goods on its shelves aligned with the numbers on its books. They fall into six working categories: physical and system security, documentation of inventory movement, counting and reconciliation, valuation, segregation of duties, and disposal. Layered on top are compliance rules from GAAP, the Internal Revenue Code, and, for public companies, the Sarbanes-Oxley Act. Weak controls in any of these areas feed directly into overstated assets, misstated cost of goods sold, and, eventually, restatements or tax adjustments.

Physical Security and System Access

Protecting inventory starts with the warehouse. Access to storage areas should be limited to authorized personnel, with key cards or biometric scanners producing an electronic log of every entry and exit. That log converts a vague “someone must have taken it” into a traceable timeline. High-value stock such as electronics components or luxury goods belongs in locked cages or secure rooms separate from general inventory, often behind a dual-authorization requirement so two credentialed people must be present to open the enclosure. Surveillance cameras at entrances, exits, and handling areas act as both deterrent and detective control, and random exit checks add another layer. Alarm systems monitored by a third party fill the gap during off-hours.

Physical locks matter less if anyone with a login can adjust quantities in the accounting system. Role-based access in the ERP is the equivalent control for the records. A warehouse clerk who picks and packs should not be able to post journal entries against inventory valuation accounts. Administrative accounts that can modify system configurations or create user roles should require multi-factor authentication. Access reviews on a quarterly cadence catch the permissions that accumulate as employees change jobs, which is where you find a single user who can both receive goods and approve purchase orders.

Automated controls inside the system reduce reliance on human discipline. Approval workflows can block purchase orders above a set threshold until a second manager signs off. Matching algorithms can flag receiving quantities that deviate from the purchase order. Exception reports can surface spikes in adjustments from one user or repeated write-offs in a single product category. These do not replace human judgment; they make sure the right person gets notified before a small problem grows.

Documenting Inventory Movement

Every movement in or out of the facility needs a paper trail that ties the physical reality to the accounting records. Gaps in that trail are where misstatements hide.

Receiving

When goods arrive, best practice is a blind count. The receiving clerk counts without seeing the quantity on the purchase order, forcing an independent verification instead of a rubber stamp. The count goes on a sequentially pre-numbered receiving report signed by the clerk and the carrier’s representative. Pre-numbered forms make it obvious when a document goes missing.

Before the vendor invoice is approved for payment, a three-way match compares the invoice, the original purchase order, and the signed receiving report. If quantities or prices fall outside a predetermined tolerance, a procurement manager independent of receiving investigates and documents the resolution before accounts payable processes payment. This single control prevents overpayment for goods never received and catches pricing errors that would otherwise inflate inventory cost on the balance sheet. Once accepted, each item or carton is tagged with a barcode or RFID label and entered into the perpetual inventory system immediately. Delaying that step creates a window where goods exist physically but not in the system.

Shipping

Nothing should leave the warehouse without an approved sales order or material transfer document. Warehouse staff match items physically pulled from shelves against the shipping document, and any substitutions or short-picks require a supervisor’s countersignature. Before the truck pulls away, a shipping clerk performs a final scan and reconciliation against the sales order, which updates the perpetual inventory in real time and generates the cost of goods sold entry. The completed shipping documentation, including the carrier’s bill of lading, is archived digitally and cross-referenced with the sales invoice.

When auditors find a gap between physical goods and records, the burden falls on the company to prove the records are right. Without the documentation, it cannot.

Counting and Reconciliation

Perpetual records are only as reliable as the process that verifies them against what is actually on the shelves. Auditing standards require independent auditors to observe physical inventory counts and test the accuracy of inventory records, so counting procedures need to withstand outside scrutiny.¹

Full Physical Counts

A complete physical count is typically performed annually or semi-annually when operations are quietest. Before the count, management establishes a formal cutoff: receiving and shipping stop, and every pending transaction is fully documented. Without a clean cutoff, goods in transit get counted twice or not at all. Count teams use pre-numbered count tags controlled by a reconciliation supervisor who does not participate in the counting itself. Dual count teams strengthen the process further, with one team counting and a second independent team verifying before tags are collected.

Cycle Counting

Cycle counting spreads verification work across the year rather than concentrating it in one disruptive shutdown. A subset of items gets counted daily, weekly, or monthly based on value, movement volume, or historical error rates. High-value items that account for the bulk of inventory dollars should be counted more frequently than slow-moving, low-cost stock. Auditing standards recognize that well-maintained perpetual records checked by periodic physical counts can be reliable enough to eliminate the need for a single annual count of every item, provided the cycle counting program is rigorous and consistent enough to produce results substantially equivalent to a full count.¹

Variance Investigation and Cutoff

Any discrepancy between the physical count and the system record demands investigation. Material differences require root cause analysis tracing the problem to a specific source: a documentation error, a security failure, an unrecorded scrap disposition, or a system glitch. The adjustment to the perpetual records must be authorized by a manager independent of both counting and custody, typically the financial controller. Adjustments made without documented investigations are a red flag auditors will question.

Cutoff errors are one of the most common sources of inventory misstatement. Transactions that happened before the cutoff date belong in the current period; transactions that happened after belong in the next one. In practice, that means recording the last several receiving reports and shipping documents before the count, then tracing them to purchase and sales invoices to confirm each landed in the correct period.

Scrap and Disposal Controls

Obsolete, damaged, or expired inventory does not just disappear. Without formal disposal controls, it walks out the door unrecorded while the financial statements keep carrying an asset that no longer exists. A lot of shrinkage hides here, because scrap disposals get dismissed as routine housekeeping rather than transactions that affect the books.

Every disposal should follow a documented authorization workflow. The department head confirms the goods are genuinely beyond use, a finance manager approves the write-off, and an asset management team member physically verifies the items before they leave the building. Multi-level approval prevents a single employee from writing off inventory to conceal theft. The paperwork should include a scrap approval note, a list of assets being disposed, any vendor quotation or auction record if the scrap has salvage value, a gate pass authorizing physical removal, and a disposal certificate. For electronic waste, disposal should run through authorized recyclers, with data destruction certificates for any IT equipment.

Valuation Controls

Getting the count right is only half the job. The cost assigned to each unit matters just as much, because inventory valuation flows directly into cost of goods sold and gross profit.

Costing Method Consistency

Companies must select and consistently apply an approved costing method such as FIFO or weighted-average cost. That choice is disclosed in the notes to the financial statements so investors and auditors can evaluate the results. Switching methods mid-year, or applying different methods to similar product lines without justification, creates the kind of inconsistency that triggers audit findings.

Lower of Cost or Net Realizable Value

Under U.S. GAAP, inventory measured using any method other than LIFO or the retail method must be carried at the lower of its cost or net realizable value. Net realizable value is the estimated selling price in the ordinary course of business, minus reasonably predictable costs of completion, disposal, and transportation. When evidence shows net realizable value has fallen below cost due to damage, obsolescence, or market price changes, the difference is recognized as a loss in earnings in the period it occurs.²

Companies need a periodic review process for slow-moving, damaged, or potentially obsolete stock. A quarterly or at minimum annual review compares carrying costs to current market conditions and identifies items that need write-downs. The controller should approve all write-down entries, and substantial or unusual losses must be disclosed separately in the financial statements.² Overstated inventory is one of the most common areas of scrutiny in financial audits, and a weak write-down process is usually the reason.

Segregation of Duties

Segregation of duties prevents any single person from being able to commit and conceal fraud or errors within the inventory cycle. The principle is straightforward: separate three functions so no one person handles more than one of them.

Custody: physical control over inventory, including receiving, storing, and shipping.
Authorization: approving purchases, disposals, transfers, and write-offs.
Record-keeping: entering transactions into the accounting system and maintaining perpetual inventory records.

In practice, the procurement manager who authorizes a purchase order should not be the person who receives the goods at the dock. The warehouse clerk who moves stock should not have system access to adjust inventory records. And the person who performs a physical count must not also have the ability to post the resulting adjustment to the general ledger. If one person both counts and adjusts, concealing theft becomes trivial. System access rights are the enforcement mechanism, and only accounting personnel should be able to post journal entries affecting inventory valuation accounts.

Compensating Controls for Smaller Organizations

Full segregation of duties requires enough staff to spread the work around. A five-person company cannot always keep custody, authorization, and record-keeping in three separate pairs of hands. That is reality, not an excuse to abandon the principle. The most effective compensating control is active management oversight. The owner or a senior manager reviews inventory adjustment logs, write-off summaries, exception reports, and bank reconciliations regularly, and substantively. If the same employee both receives inventory and enters it into the system, someone independent should be reviewing those receiving reports against purchase orders at least monthly.

Dual authorization for high-value transactions adds another layer. Requiring two people to approve disposals, large adjustments, or purchases above a dollar threshold reduces opportunities for misappropriation even when the same person touches multiple functions day to day. Bringing in an outside accountant to perform periodic inventory counts or reconciliations introduces the independent check the staffing model cannot provide internally. Reconciliation software, approval workflows, and automated invoice matching enforce rules regardless of who is involved. A system that will not process a payment until the three-way match is satisfied does not care whether the same person entered the receiving report and the purchase order.

Tax Compliance and Inventory Method Rules

Controls over inventory do not stop at the financial statements. The IRS imposes its own requirements, and getting them wrong triggers costly adjustments, penalties, and retroactive method changes.

General Rule and the Small Business Exemption

Under the general rule, businesses carrying inventory must account for it using a method that conforms to best accounting practices and clearly reflects income.³ Smaller businesses get a significant break. For tax years beginning in 2026, a business meets the gross receipts test for the small business exemption if its average annual gross receipts over the prior three-year period do not exceed $32 million.⁴

Qualifying businesses can treat inventory as non-incidental materials and supplies or conform their tax method to their financial statement method, rather than following the full inventory capitalization rules.³ They are also exempt from the uniform capitalization rules that otherwise require capitalizing certain indirect costs into inventory.⁵ Companies that operate related entities should note that aggregation rules may combine the gross receipts of affiliated businesses for purposes of the test.

LIFO Conformity

Companies that elect last-in, first-out for tax purposes take on an additional obligation. Under federal tax law, a business may use LIFO for tax reporting only if it also uses LIFO when reporting income to shareholders, partners, beneficiaries, or creditors. Using LIFO on the tax return while reporting under FIFO in the annual report to investors violates the conformity rule and can result in losing the LIFO election. The rule applies on a controlled group basis, so all financially related corporations are treated as one taxpayer for conformity purposes.⁶ From a controls standpoint, the accounting and tax teams must coordinate on inventory method elections, and a formal review step should confirm the same method appears on both the tax return and the external financial statements before either is finalized.

Sarbanes-Oxley Obligations for Public Companies

For publicly traded companies, inventory control failures carry regulatory consequences beyond restated financials. Section 404 of the Sarbanes-Oxley Act requires every annual report filed with the SEC to include an internal control report acknowledging management’s responsibility for maintaining adequate internal controls over financial reporting and containing management’s assessment of whether those controls were effective as of the fiscal year-end.⁷

The company’s external auditor must then independently attest to management’s assessment.⁷ If the auditor identifies a deficiency serious enough that a material misstatement could go undetected, that deficiency is classified as a material weakness. The company is obligated to disclose all material weaknesses publicly.⁸

Inventory is a frequent source of material weakness disclosures. Common triggers include an inadequate process for evaluating lower of cost or net realizable value, a breakdown in the physical count process, or insufficient segregation of duties over inventory adjustments. Public disclosure of a material weakness in inventory controls damages investor confidence, often triggers a stock price decline, and invites increased regulatory scrutiny in subsequent filings. For public companies, the controls described above are not optional best practices. They are compliance obligations backed by law.

1
Public Company Accounting Oversight Board. AS 2510 – Auditing Inventories
2
Financial Accounting Standards Board. ASU 2015-11 Inventory (Topic 330)
3
Office of the Law Revision Counsel. 26 USC 471 – General Rule for Inventories
4
Internal Revenue Service. Revenue Procedure 2025-32
5
Office of the Law Revision Counsel. 26 USC 263A – Capitalization and Inclusion in Inventory Costs
6
Office of the Law Revision Counsel. 26 USC 472 – Last-in, First-out Inventories
7
Office of the Law Revision Counsel. 15 USC 7262 – Management Assessment of Internal Controls
8
U.S. Securities and Exchange Commission. Management’s Report on Internal Control Over Financial Reporting