The Financial Risks a Growing Business Should Review Every Month

Why growth hides risk

Growth conceals risk because rising revenue papers over almost every early warning sign. Cash keeps arriving, so nobody notices it is arriving slower. Profit keeps growing, so nobody notices the margin shrinking. Everyone is busier, so reconciliations slip, approvals get waved through, and the owner, who used to see every transaction, now sees a summary of a summary.

The businesses that get hurt in a growth phase are rarely surprised by something exotic; they are surprised by an ordinary problem that had six quiet months to compound. There is also an instinct gap at work: past a certain size, the owner's feel for the business, once genuinely reliable data, stops being either, and nothing replaces it unless something is deliberately built to.

That is the case for a standing monthly risk review: a fixed set of questions asked of the numbers every single month, in the same meeting where you review the results. Not a committee, not a binder, twenty minutes of deliberate attention inside your normal management reporting rhythm.

Flat months buy you slack for skipping it. Growth does not. Every risk below scales with revenue, headcount or transaction volume, which means all of them are growing exactly as fast as you are. And to be clear about the goal: a growing business is supposed to take risks, so the review exists not to eliminate them but to make sure every risk you carry is one you chose, at a size you knew about, with an early signal attached.

Cash and working-capital risk

The first monthly question is whether growth is outrunning the cash that funds it, because a growing business can be profitable and insolvent in the same quarter. Every new dollar of sales has to be financed before it is collected: labour paid, materials bought, inventory stocked, sometimes weeks or months before the customer pays. Grow fast enough and the financing gap widens every month even while the income statement improves, the pattern lenders call overtrading.

The review is short. Look at the forward cash view, not just the balance: given receivables, queued bills, payroll dates and loan payments, where do the next eight to twelve weeks pinch? Look at the line of credit floor, the lowest the line gets each month; a floor that rises for three straight months means borrowed working capital is becoming permanent.

Then look at what the next stage of growth will consume, because the hire, the location or the equipment is a cash commitment long before it is a profitable one, and payroll is the commitment that repeats every two weeks whether the revenue showed up or not. If you carry debt with covenants, add the ratios to this same sweep and compute them before the bank does. Cash flow surprises in growing companies are rarely surprises to the numbers; they are surprises to the people who stopped looking forward.

Receivables, concentration and margin drift

The revenue side carries three risks that grow together: customers paying slower, too much revenue depending on one customer, and prices quietly falling behind costs. Each is invisible in a single month and obvious in a six-month trend, which is exactly why the review is monthly.

Receivables stretch naturally as sales grow, because credit decisions that were once the owner's instinct are now made by whoever wants to close the sale. Watch receivable days and the aging of your ten largest balances; a big customer drifting from thirty days to sixty is borrowing your money without asking. The containment discipline is boring and effective: credit terms set in writing, invoices out the day the work ships, and someone who owns collections as a job rather than a hobby.

Concentration is the quieter cousin. When one customer becomes a large share of revenue, their payment habits become your cash flow and their bad year becomes yours, and the same logic applies to a single key supplier or one contract vehicle. The monthly question is simply what share of revenue and receivables the top one or two names represent, and whether that share is rising, because concentration that grows month over month is a strategy question wearing an accounting disguise.

Margin drift rounds out the trio: costs rise mid-year, quotes go stale, discounts creep, and busy teams keep selling at last year's prices. Gross margin, tracked monthly against a baseline, in total and by line or job, is the alarm. Where work is project-based, add work in progress to the same review, because unbilled effort is where project margins go to die.

Tax and compliance risk grows with payroll and revenue

Compliance risk scales automatically with growth: bigger payroll means bigger source deductions, more revenue means more HST collected, and a better year means the instalment schedule based on last year is now too small. None of this requires anyone to make a mistake; it happens by default, which is why it belongs on the monthly list rather than the annual one.

Three checks cover most of it. First, confirm the remittances actually went out, source deductions and HST are trust amounts, directors can be personally liable when they go unremitted, and a business that misses them is financing itself with the most expensive money in Canada. Second, keep a live compliance calendar across every filing, HST, payroll, T4s, instalments, the T2, so deadlines are managed like deliveries instead of memories.

Third, compare the year you are actually having against the year the instalments assume, because interest on shortfalls accrues quietly. This is where risk review turns into tax planning: a growing profit, seen in-year, means instalments get resized, compensation gets planned before December, and purchases get timed deliberately. All of those decisions evaporate if the first honest look at the year happens in the spring.

Growth also trips thresholds that change your obligations without anyone deciding anything. Rising revenue can change your HST filing frequency, a bigger payroll can change how often source deductions must be remitted, and new programs or provinces add registrations of their own. A quarterly glance at what changed in size, and what that size now requires, is cheaper than the letter that points it out later.

Error and fraud risk: more hands on the money

The fifth monthly review is of your exposure to error and fraud, because growth changes who can move money faster than it changes the controls around them. In the early years one owner saw everything; now a bookkeeper posts, an office manager pays, several people hold cards, and vendor emails arrive asking for updated banking details. Most losses at this stage are not dramatic: duplicate payments, an invoice paid to a fraudster, expenses drifting, a payroll change nobody approved.

The monthly questions are structural, not accusatory. Can any one person create a vendor, approve an invoice and release the payment alone? Are bank reconciliations done, on time, by someone who does not also make payments? Do reconciling items and suspense balances get cleared, or do they accumulate in the dark?

Two smaller leaks belong in the same scan. Card and expense spending grows with headcount and rarely shrinks on its own, so the review should confirm who holds cards, what the limits are, and whether statements are actually checked against receipts. Any refund, credit or write-off path deserves a named approver too, because money that leaves quietly through the back door never looks like a payment at all.

These are internal controls questions, and the standing versions of them are covered in why internal controls matter even in an owner-managed business and, for the payments process specifically, in how to prevent payment and approval errors in a growing business. The monthly risk review is where you verify the controls still fit the size of the business, because the control set that was fine at eight people is usually stretched at twenty.

The risk review in practice, and what changes your list

In practice the risk review is one page inside the monthly reporting, produced by the close and read in the monthly meeting. It works because each risk has an early signal that shows up in a specific place, so the review is a scan of known locations rather than a fishing trip:

None of it works without the underlying discipline: the signals only exist when a real month-end close happens every month, full-cycle accounting with every balance reconciled to something outside the system. An unreconciled ledger does not just fail to show these risks, it actively hides them, because the errors and the fraud both live in the accounts nobody ties out. A slow close has the same effect for a different reason: a risk signal delivered in week seven is an autopsy.

Ownership is the last piece: the review needs a name on it. In practice that is whoever produces the close, reading the signals as part of delivering the package, with the owner in the meeting where they get raised. What kills risk reviews is not lack of skill but diffusion, five people who each assumed someone else was watching the aging.

Starting is simpler than it sounds. Month one, get the reconciliations current and the compliance calendar built, because the signals cannot exist without them. Month two, add the risk page to the package with the five areas and their thresholds. By month three the review is a habit that costs twenty minutes, and the first thing it usually surfaces is something small and fixable, which is the entire point of finding it now.

How heavy your review should be depends on a few facts:

• Pace of growth. The faster revenue and headcount rise, the shorter the interval a problem needs to become expensive.
• Customer concentration. One dominant customer moves concentration from a line item to the top of the agenda.
• Inventory or work in progress. Both add a category of risk, and a counting discipline, all their own.
• Debt and covenants. Leverage means a modest downturn can trip a covenant, so the ratios join the monthly scan.
• How many people can move money. Every added signer, card and approver widens the error-and-fraud surface.
• Industry exposure. Cash-heavy, project-based and thin-margin businesses each tilt the list toward their own failure modes.

If nobody in the business currently owns this review, that is the real finding. Established businesses in Ontario usually close the gap with an outsourced finance and accounting department rather than a hire: one team keeping the books current, running the compliance calendar, producing the reporting and sitting in the monthly meeting where these questions get asked. That is our Ongoing Financial Partnership, delivered as End-to-End Accounting, with advisory in the room rather than on retainer somewhere else. A free 15-minute discovery call is the first step, and the first month usually starts with the reconciliations.