Bolt-On Acquisitions: How to Integrate Controls Before the Auditors Ask
Buy-and-build strategies create control gaps fast. Here is a practical sequence for integrating financial controls after a bolt-on acquisition.
Buy-and-build is the dominant value creation strategy in UK mid-market private equity, and it is also the fastest way to fracture a control environment. Every acquisition adds a ledger, a payment process, a payroll cycle, a set of user accounts and a group of people who have never been through your close.
Most management teams plan the commercial integration in detail and leave the control integration to be discovered during the first consolidated audit. That is where the cost lands.
Why bolt-ons break the control environment
An acquired business rarely arrives with documented controls. It arrives with habits. The founder approved payments verbally. The bookkeeper posted journals without review. Access to the accounting system was shared. None of that mattered while the business was independent and unaudited. It matters immediately once the numbers consolidate into a group that is audited.
Three problems recur:
- The group cannot evidence controls over a material component it now owns.
- Opening balances cannot be substantiated because the target never reconciled them.
- Two finance teams operate two different definitions of the same number.
The first 30 days: containment, not transformation
Do not attempt to migrate the target onto group systems in month one. Contain the risk instead.
- Remove and reissue system access. Every leaver from the deal, every shared login, every administrator account.
- Impose group payment authorisation limits immediately, even if the target keeps its own bank accounts.
- Freeze the chart of accounts and require group approval for new codes.
- Name one person in the target who owns the monthly submission.
Containment buys you time. It also gives the auditor something to test in the stub period, which is usually the hardest period to evidence.
Days 30 to 90: reconcile and document
This is where audit exposure is actually reduced. Reconcile the opening balance sheet line by line and document the basis for each acquired balance. Auditors will focus on completeness of liabilities, revenue cut-off around completion, and any purchase price allocation adjustments.
At the same time, write down how the target actually operates. A two-page narrative per cycle covering revenue, purchases, payroll and close is enough. It is far more useful than a policy the target has never followed.
Days 90 to 180: converge the close
Convergence means one timetable, one reconciliation standard, one review sign-off and one reporting pack. It rarely means one ERP in year one.
Set the target the same close deadline as the rest of the group, require the same reconciliation evidence, and review their submission with the same challenge you apply internally. If the target cannot hit the deadline, that is information, not a reason to relax the standard.
What auditors will ask for
Expect requests covering completion accounts and their reconciliation to the ledger, evidence of who approved the opening balance adjustments, access reviews for the acquired systems, confirmation that intercompany balances agree in both directions, and management review evidence for the acquired entity in each reporting period since completion.
The businesses that handle this well treat each bolt-on as a control project with an owner, a plan and a deadline, running alongside the commercial integration rather than behind it.
The board question worth asking
After each acquisition, one question tells you whether integration is on track: if the auditor selected a transaction from the acquired business at random, could we evidence who authorised it, who reviewed it and how it reached the consolidated numbers?
If the answer is no six months after completion, the next audit will be expensive.