Definitions come before data
The hardest part of any benchmark is agreeing what each measure means. Take days to close. One company counts from month end to the day the trial balance is final, another to the day the board pack goes out. Both answers are reasonable, and they cannot be compared. We write every definition into the protocol before collection starts, test it with a few participants, and print it beside the result in the report.
Data tests beat self-reporting
Surveys record what finance leads believe. Where participants agree to share exports from QuickBooks Online, Xero, NetSuite, Sage Intacct or Business Central, we run the same tests on every dataset: the share of journal entries posted manually, the number of users who can both create vendors and approve payments, how often entries are posted outside working hours. Those results are measured rather than reported, and setting them beside the survey answers shows where belief and practice diverge. The questions in our internal controls checklist for growing companies show the kind of ground a maturity instrument covers.
Transparency studies use public sources
A sector transparency study asks what organizations publish about their own governance. For nonprofits, Part VI of Form 990 asks whether the organization has written conflict-of-interest and whistleblower policies, which gives a consistent public starting point. For companies, we code websites, annual reports and policy pages against a published checklist. Is there a dated code of conduct? A named contact for concerns? A statement of who audits the accounts? Each organization studied can see how it was coded and correct a factual error before publication.
The method is published in full
Every report carries a methodology section that lets a reader check our work: who was invited, who responded, how measures were defined, what was excluded and why, who commissioned and paid for the study, and any relationship between Finance Ethics and the participants. A research editor who did no analysis reviews both report and method before release.
For a quick reading of your own organization first, the Controls Health Self-Check scores your answers across the five COSO components. Organizations ready to publish their own position can turn it into a yearly Financial Integrity Report.
