The owner of a three-location holistic medical practice pulls her Q3 numbers and sees revenue up 18 percent year over year. She texts her business partner the good news. Three weeks later, the front desk manager at her flagship location resigns without notice. Within sixty days, four patients across two of her sites dispute charges, two refunds were processed without documentation, and her merchant processor places one of her accounts under review. The monthly reconciliations all tie out. The financial risk building inside her business does not show up in any of them.
This is the difference between standard financial reporting and forensic financial risk assessment. For holistic medical practices generating $1M or more in revenue across multiple locations, the distance between these two views creates financial damage. Revenue integrity weakens, cash leaks, and the reported financial position drifts from operational reality.
What Financial Risk Assessment Means
The COSO Internal Control Framework treats risk assessment as central to financial control. The framework calls for analyzing risks to financial reporting, addressing fraud risk at the transaction level, and tracking how change affects control integrity. For a multi-location healthcare practice, that work goes beyond reviewing month-end statements. It involves a structured examination of how revenue gets recognized, where cash moves, who controls financial transactions, and where the reported numbers diverge from underlying transaction activity at each location.
Applied to a holistic medical practice, financial risk assessment breaks into five areas:
Where Financial Risk Lives in Multi-Location Practices
Revenue cycle risk tops the list. Patient payments arrive through six channels:
- Credit cards
- HSA and FSA accounts
- Financing platforms
- Membership subscriptions
- Insurance reimbursements
Each channel comes with different posting requirements, timing rules, and review cadences. When one staff member processes payments, posts adjustments, and issues refunds without segregation of duties, the practice has built a single point of vulnerability into its revenue cycle. Multi-location operations compound that risk: each site brings its own cash drawer, distinct staff turnover, and a different end-of-day close. A revenue leak at one location can hide inside aggregate financials that show the business performing well at the entity level.
Where revenue collection ends, cash management risk begins. Each location generates cash receipts at the front desk and prepares deposits on its own schedule. When deposit procedures lag, or when the same staff member counts cash, prepares the deposit, and records the entry, cash can move through the business without leaving a clear audit trail.
Working capital risk sits in inventory, receivables, and deferred revenue. Holistic practices invest significant capital in high-value inventory categories such as:
Without cycle counts tied to treatment logs and inter-location transfer documentation, inventory values on the balance sheet drift from the physical count. Receivables aging shows the same pattern when refund logs and adjustments go untested against documentation.
On the liability side, prepaid memberships, IV therapy packages, and treatment series create deferred revenue obligations. When package usage tracking does not match the deferred revenue liability, the balance sheet misrepresents what the practice owes patients.
Financial reporting risk is what most practice owners do not see. Consolidated statements roll up location-level data that may be incomplete. Inconsistencies appear when account coding varies across locations, inter-location transfers go unreconciled, or revenue recognition shifts between membership and per-visit billing. The reported financial position becomes less reliable as a management tool.
Concentration risk does not show up in monthly financial reports. A business with 60 percent of revenue from one service line, 40 percent of patients tied to one provider, or financial controls concentrated in one bookkeeper has embedded vulnerability that becomes visible only when something changes.
What a Financial Risk Assessment Looks Like
Forensic accounting for medical practices applies COSO internal control principles and Certified Fraud Examiner methodology to healthcare transaction patterns. The assessment begins with revenue mapping. Revenue sources get traced from patient interaction to general ledger entry. Each handoff between point of sale, practice management software, and accounting system requires documentation. Revenue recognition timing then gets tested against what staff actually do, not what the policy describes.
Cash controls testing follows the revenue mapping step. Deposit sampling verifies that cash and card receipts post completely and on time, location by location. Bank reconciliations come under review for unreconciled items aged beyond 90 days. Refund log testing follows the same approach, comparing each refund against documentation, employee patterns, and patient records. Adjustments and write-offs come out for pattern analysis.
Working capital testing runs in parallel. Inventory balances get matched against physical counts at each location. For receivables, the aging review covers stale balances, suspicious adjustments, and write-off patterns that conflict with practice policy. Deferred revenue testing compares package usage logs and membership rosters against the recorded liability to verify what the practice owes patients. Vendor master files require scanning for duplicates, addresses matching employee records, and payment patterns that lack supporting service documentation.
Financial reporting review closes the assessment. Account coding gets tested for consistency across locations, and inter-location transfers get reconciled at the entity level. The review verifies revenue recognition follows the practice’s stated policies. Concentration risk across service line mix, provider dependence, and financial staffing gets quantified with dollar figures.
The output never becomes a report that lives in a drawer. The final document includes three components:
- Prioritized financial risk findings
- Control recommendations tied to specific weaknesses
- A remediation timeline with owner accountability
The Practitioner Reality
Healthcare practice owners did not go into functional medicine, integrative care, or holistic patient work to manage financial risk. They opened clinical practices and watched the business grow across multiple locations. By the time revenue passes seven figures, monthly P&L review stops being sufficient on its own. Practices at this scale need fractional CFO support with forensic accounting capability included.
A financial risk assessment is the diagnostic that tells you what your business looks like financially, where the risk sits across each location, and what you need to address. Skip it, and the first hard review could come from an IRS examination, a bank covenant test, or a fraud scheme that finds the weakness.
If your practice has crossed $1M across multiple locations and your only financial review comes from your CPA during tax season, your business is operating on assumptions instead of evidence. Bring in forensic eyes to run the assessment, build the financial controls your scale now requires, and then run the practice you thought you already had.
Healthy Bodies of Finance provides fractional CFO and forensic accounting services for holistic medical practices generating $1M or more in annual revenue. Engagements include financial risk assessments, internal control build-outs, financial leadership and ongoing fractional CFO support designed for multi-location healthcare operations.
To schedule a financial risk assessment for your practice, visit here.
Follow Us Online
Stay connected and get more exclusive content on:
Instagram: @healthybodiesoffinance
Facebook: https://www.facebook.com/healthybodiesoffinance
LinkedIn: https://www.linkedin.com/in/lozellemathai/
TikTok: @healthybodiesoffinance
How To Correctly Record Revenue For Yoga, Pilates, And Barre Studios
Discover essential bookkeeping tips for Yoga, Pilates, and Barre studios. Learn how to accurately re…
How To Achieve Financial Health And Wellness For Your Business
At Body of Accounting, our work focuses on the health and wellness industry because, like you, we pl…
This article is designed to provide information only and should not be considered legal or tax advice. Because of the complexity of the law and the variables in your own personal tax and accounting situation, you can’t rely on our advice specifically related to your unique circumstances. In order to get the best tax savings and legal advice available to you, you should consult with your own accountant, attorney or advisor regarding your particular facts and circumstances. Healthy Bodies of Finance is an accounting firm that specializes in working with health and wellness providers. We provide monthly accounting & bookkeeping services and financial education. For more information on our specialized services for health and wellness providers please contact us at info@healthybodiesoffinance.com