How to Establish Financial Controls in a Business You Just Bought

The business is an old-line plumbing service outfit, and everybody's told you the same thing for months: change nothing for ninety days, just watch. That's good advice. Except for the bank.

The bank is the one exception

On day one you change three things. Who can sign on the accounts, who can spend how much, and how you see cash every day. Nothing else.

Why only these? Because you borrowed to buy this business, often through an SBA 7(a) loan, and that loan gets paid out of the cash the business throws off every month. Not revenue, cash. And cash is the one thing a new owner can lose fastest and get back slowest.

Everywhere else, the discipline of your first 100 days after buying is to preserve and understand before you touch anything. Same team, same vendors, same prices, same way of doing the work. Financial controls break that rule on purpose, because the seller's name shouldn't stay on your accounts and nobody's spending authority should be left undefined after close.

First: the accounts and who can sign

This is the most urgent one because it decides who can move money. Until you change it, the previous owner may still be able to sign on accounts you now own.

Go to the bank on the first business day with your closing documents. Then work it in this order:

1. Take the seller off. Their authority to sign checks, start transfers, and use account cards ends at close, and the bank needs paperwork to make that real. It's simply the transfer of control you paid for.
2. Put yourself on as controlling signatory. Every operating, payroll, and reserve account. Confirm you can see and approve every movement of money.
3. Reset online banking and payment tools. New logins, ACH origination access, any saved payment methods, so nothing moves under the old owner's credentials.
4. Map every account and every recurring payment. Each account, each auto-draft, each standing vendor ACH. You want to know what leaves the business without anyone touching it.

Your due diligence checklist should already have turned up most of these. Day one is when that list becomes actual control.

One thing from experience: catalog the auto-payments and leave them running. Killing a recurring payment you don't understand yet is exactly the kind of operational change that's supposed to wait.

Second: spending limits, before anybody spends

Without written limits, the crew keeps spending on the old owner's unwritten rules while you're still figuring out the place. So name who can spend what, and up to how much, before the first uncontrolled purchase happens.

A spending limit is a named person with authority. Anything over the line goes through somebody, and for the first few weeks that somebody is you.

• Set one threshold you sign off on. Pick an amount, say any spend over $500, that needs your approval first. Keep it low early and raise it as you learn what's routine.
• Write down who approves what below that line. Maybe the office manager already approves normal purchases. That can keep going, but now it's written down.
• Freeze new vendors and new recurring charges. Existing vendors keep running. No new auto-draft or contract starts without you in the early weeks.
• Two sets of eyes on payroll and big transfers. Payroll runs on schedule, but you look at the run before it goes out until you trust the numbers.

These limits are tight on purpose and they won't stay that tight. You start conservative because you don't know yet which expenses are real, and loosening them as you learn is part of the job.

It's the money half of the same authority map the post-acquisition systems audit builds for operations. Money goes first because that's where the exposure is.

Third: a cash view you actually look at

You can't protect cash you can't see. Most new owners spend their first weeks with no daily read on what's coming in and going out.

Build something simple you check every morning. No new software. Just one consistent place that shows what came in, what went out, and what's scheduled:

• The operating balance, every day. One number, same time each morning. You'll know fast when something's off.
• The next thirty days of known outflows. Loan payment, payroll, rent, big vendor drafts. No scheduled debit should surprise you.
• When receivables actually land. Timing matters as much as the amount, because the loan payment has a date on it.

The gap between doing the work and getting paid for it is your cash conversion cycle. In the first weeks it's the number most likely to catch you off guard, since the seller managed it on instinct and never wrote it down.

This is also when you start reading the books for real. Learning to read the P&L you inherited turns the seller's numbers into your own picture of where the money comes from. And keep one distinction front of mind: your debt gets paid from the cash that actually lands in the account. A profitable month can still come up short on the day the payment's due.

Where the exception stops

This line matters as much as the controls do. Setting up financial controls doesn't mean you've started changing the business, and treating it like permission is the most common way new owners damage what they bought.

Everything operational still waits:

• Pricing stays put. You don't know yet why a price sits where it does, and changing it in week one is a guess with the customer relationship on the line.
• Staffing stays put. The team is the knowledge you paid for, and reorganzing before you understand the work is how that knowledge leaves.
• Vendors stay put. Existing terms keep running, even the ones you suspect are bad, until you know what they're buying you.
• Systems and process stay put. Watch first, improve later.

The order is preserve, understand, stabilize, improve, then scale. Controls sit outside that order as the day-one carve-out, next to the legal transfer and the bank signatories. Integration is where the price you paid gets captured or wasted, and an early operational change is how owners waste it.

Where the rest lands in time is the job of the 30-60-90 day plan. So set the three controls on Monday, then go spend ninety days learning what you actually own.

FAQ

What financial controls should you set up after buying a business?

Set up three controls on day one: change bank signatory authority so the seller can no longer move money, set spending approval limits so purchases above a threshold pass through you, and build a daily cash view. These protect the cash that services your acquisition debt while you learn the business.

What should you change first after buying a business?

Change the bank signatories first, the same day you close. Removing the seller's access and making yourself the controlling signatory is the single most urgent post-close action, because it decides who can move the money the business runs on before anything else can go wrong.

Should a new owner change anything immediately after an acquisition?

Only financial controls, legal transfer, and bank signatories change immediately. Everything operational, including pricing, staffing, vendors, and systems, is preserved and observed for the first months, and the bank is the deliberate exception to the rule of changing nothing right after close.

You cannot protect cash you have not measured, and you cannot see the gap a buyer will eventually see in the business without measuring it either.

Keystone is closed for now, while the build is finished. Once it opens, the diagnostic asks 18 questions in about four minutes and returns three scores and your value range with the most likely figure locked, calibrated against 10 years of BizBuySell Insight Reports and 1.6M+ SBA 7(a) loan records.

You can get on the waitlist at https://app.trykeystone.io.

The bigger version of this is a Full Operations Modernization, where the decision routing, documented procedures, manager structure and owner dashboard get built into a live system your team runs.

It is available now on a selective, scope-first basis, and it starts with a conversation rather than a checkout. The Full Operations Modernization page is where scoping begins.