The Annual Business Health Check Every Owner Should Do

Most owners run their business off a dashboard of habit: cash looks alright, the team seems fine, the ATO hasn't called. That works until it doesn't. An annual health check is a deliberate half-day where you stop steering by feel and look at the actual state of the business across finance, people, compliance and dependency. Here's a practical structure you can run yourself, ideally at the same time each year so you can compare against last year's version.

Start with the money, honestly

Pull your last twelve months of figures and read three things. First, gross margin trend by month — not just the annual average, because a slow slide is invisible until you line the months up. Second, your working capital cycle: how long between paying for something and getting paid for it. If debtor days have crept out, you're financing your customers without realising it. Third, your revenue concentration — what proportion sits with your top one or two customers. A business that looks healthy on turnover can be one lost account away from a problem.

Then check the plumbing. Are your bank feeds reconciled and current, or is there a backlog someone keeps meaning to clear? Unreconciled accounts are where errors and quiet fraud both hide. If your back office isn't connected — bank, accounting, payroll and invoicing all talking to each other — that's usually the first thing worth fixing.

Test your compliance calendar

List every obligation with a deadline and confirm who owns each one: BAS and IAS lodgements, PAYG withholding, superannuation guarantee payments, workers' compensation renewals, insurance renewals, and any licences specific to your industry. The failure mode here is rarely not knowing an obligation exists — it's that the person who used to handle it left, or it lived in one person's head. Superannuation deadlines in particular are unforgiving; late payments can lose their deductibility and trigger a charge. Confirm your payment dates against the ATO's current schedule rather than what you remember them being.

Look at your people and your awards

Two questions. Are you paying people correctly, and can you prove it? Award classifications drift as roles change — someone hired as a junior three years ago may now be doing work that sits under a higher classification, and the wrong rate compounds every pay run. Check your employees' classifications against the relevant Modern Award via the Fair Work Ombudsman, and confirm your records (hours, breaks, leave balances) are complete. If you've grown past the point where one person can hold all of this, that's a signal in itself.

The softer read matters too: who is stretched, who is quietly disengaged, and where is your single point of failure? If one person leaving would genuinely hurt, that's a risk to manage before it becomes an event.

Run the owner-absence test

This is the one owners skip and shouldn't. Imagine you're unreachable for two weeks — no phone, no email. What breaks? The honest answer maps your founder dependency: the approvals only you can give, the relationships only you hold, the knowledge that isn't written down anywhere. Every item on that list is both a risk and a candidate for delegation or documentation. You don't have to fix it all this year, but naming it is the first step. Our owner absence test is a structured way to do exactly this.

Check your digital defences

Cyber hygiene has become a genuine operational risk for small business, not just an IT afterthought. Use the Australian Signals Directorate's Essential Eight as a checklist: multi-factor authentication on email and banking, patching, backups you've actually tested restoring from, and control over who has admin access. A single compromised email account can redirect a supplier payment or lock you out of your own systems. Once a year, confirm these are real and not aspirational.

Write down three things to fix

The point of the exercise isn't the audit — it's the shortlist. From everything above, pick the three items with the worst combination of likelihood and consequence, and give each an owner and a date. A health check that produces a tidy report and no actions was just an expensive way to feel busy.

Done once a year, this becomes a genuine baseline: you can see what improved, what slid, and whether the business is getting more resilient or more fragile. That trend line is worth more than any single year's snapshot.