• 

Top 10 Compliance Spreadsheet Risks and How to Avoid Them – PART 1

One of the biggest threats to compliance isn’t your employees or hackers, but a trusted tool: the spreadsheet. It is unstructured, untracked, and unsecured.  Learn to recognize top spreadsheet risks and what you can do to reduce them.

Compliance experts estimate that 80 percent of enterprises use spreadsheets to support critical business functions. For example, in one Deloitte survey of 800 financial professionals, 88 percent said their firms “use spreadsheets of material importance in financial reporting.” At the same time, however, research suggests the typical spreadsheet has a 2 to 5 percent error rate.

As a result, spreadsheets are one of the biggest compliance risks facing regulated companies. Indeed, despite their prevalent use, the life of the average spreadsheet is unstructured, untracked, insecure, and potentially just inaccurate. Learn how to pre-emptively control challenges that can run afoul of Sarbanes-Oxley (SOX), Basel II, or numerous other laws which regulate the integrity of financial processes.

Bet on auditors wanting to see all spreadsheets relating to your company’s financial reporting practices. Will your rows and columns pass compliance muster? To help mitigate the regulatory risks posed by spreadsheets, consider these 10 tips.

1: Acknowledge Spreadsheets’ Programming Power

One issue with spreadsheets is they’re simply so powerful.  The spreadsheet problem is largely due to the fact that we’ve given a programming language to a non-IT user without any development environment-type oversight or safeguards.  They’ve become the programmer, tester and the user – so you’ve just lost all objectivity. Who’s going to detect the errors in that spreadsheet?

2: Expect Errors

The average spreadsheet contains a substantial number of errors Human error research indicates that for things about as complex as creating a spreadsheet formula, the error rate floor is about 2 percent to 5 percent. The reason: people tend to take shortcuts when doing math, and these shortcuts often produce errors. Regarding automation, please see tip number eight. On a related note, spreadsheet novices are three times as likely as experts to make mistakes.

Few companies, however, test for spreadsheet errors or outright fraud, preferring instead to eyeball results—often with predictable consequences. For example, one software developer may use two 15,000-cell Excel spreadsheets to project the market for its products, with figures rounded to whole numbers. Yet another user may inadvertently round the modifier for inflation down say from 1.06 to 1, consequently resulting in a market undervaluation. Such an error would obviously qualify as a material weakness.

3: Manage Spreadsheet Changes

One solution: don’t prohibit spreadsheet use, but rather identify which spreadsheets handle critical business functions, and then implement controls to ensure their integrity and accuracy, and especially to prevent fraud. For starters, apply change management controls to spreadsheets, including sign-offs, a record of all changes and the rationale for every change, plus rollback capabilities. Each spreadsheet’s business logic must also be thoroughly vetted, as with any application which handles complex business functions.

4: Beware the Orphans

When auditing spreadsheets, pay particular attention to the orphans: spreadsheets of unknown provenance which today still drive critical business processes. As Arthur C. Clarke wrote, “any sufficiently advanced technology is indistinguishable from magic,” and as anyone who’s ever inherited a spreadsheet knows, some operate if not by magic, then at least through unintuitive logic that might take a lifetime to unravel.

Certainly, the average business user can’t be expected to accurately keep a 50-tab Excel workbook current.

5: Consider Versioning Software

The poster child of the spreadsheet world is Microsoft Excel. Until recently, however, software to manage Excel in regulated environments was scant. Beginning with Excel 2007, though, Microsoft itself began offering businesses a way to enforce change management, audit controls, and versioning for Excel spreadsheets. Together with SharePoint Server 2007, companies can even manage spreadsheets centrally and offer role-based access to HTML versions of spreadsheets.

James Tanner is an analyst at Orthus limited (http://www.orthus.com). Orthus is a leading provider of information risk professional services, helping orgnisations globally to measure, minimise and manage the information risks they face. Orthus provide end to end services for clients to comprehensivly address risk in their environments including Insider Threats (http://www.orthus.com/itm_overview.htm) addressing issues including data leakage, sabotage and fraud; External Threats including penetration testing, virtualisation security, vulnerability management and Secure Software Development Life-Cycle; Supply Chain Threats including securing cloud services and data processed by third parties; and Legal and Regulatory challenges including Payment Card Industry (PCI) Data Security Standard (DSS).

Article Source:http://www.articlesbase.com/security-articles/top-10-compliance-spreadsheet-risks-and-how-to-avoid-them-part-1-961082.html

Welcome back! You may want to subscribe to my RSS feed. Thanks for visiting!

If you enjoyed this post, make sure you subscribe to my RSS feed!

Related Posts

• Protect Your PC From The Conficker Virus In the history of the use of the Internet, users all over the globe have faced tremendous attacks that has wrecked their businesses and rendered them financially bankrupt. To forestall the reoccurence of such experiences and aid internet users and computer users alike to accomplish their purpose for using......
• Do Businesses Need Antivirus Protection? Antivirus software and services are designed to help keep your computer safe. Businesses, large and small, are at particular risk. Most businesses have some sort of accounting records stored somewhere on their computers. This is typical to help keep track of payments made, payments owed, and to help determine the......
• 5 Ways to Protect Your Business from Network Vulnerabilities Network vulnerabilities, intrusions and downtime can seriously threaten the livelihood of a business, costing thousands (if not millions) of dollars in revenue and productivity. The more you know your network, the easier it is to guarantee uptime and optimal performance. Here are 5 Ways to Protect Your Business from Network......
• Dr AntiSpy: A Rogue Security Tool Dr AntiSpy is a rogue security program that is a clone of PestTrap and SpySheriff. This parasite will display pop-up security alerts that look like Microsoft notifications, informing the user that security threat exist on their PC. Like most other fake antispyware programs, this one is designed by hackers to......
• Business Risks Associated With Data Breaches The EU Data Protection Supervisor – the independent EU supervisory authority responsible for protecting personal data within the EU – recently pushed for the EU ePrivacy directive to be amended to provide for a pan-European data breach notification requirement. In parallel, the UK Information Commissioner, who is charged with enforcing......

Related Websites

• Google Kit, or Treasure Chest, the Plot Thickens? Pre-Script Comments are now closed on this posting as Google Treasure Chest is dead. However, the problem has not gone away - the menace continues. For further information, all chat on this and subsequent scams is now here: Google Revolution, Different Name, Same Scam! and here: More on Google Profits......
• Accounting Software Can Be Sophisticated Or Simple But Rarely Both Accounting software is a system of recording financial transactions on a computer across a full range of accounting options almost invariably dependent upon the size of business being catered for. Financial software can vary from a several million pound solution for major public companies to simple managed lists of income......
• Review Your Affiliate Program Relationships The summer has come and gone and we’re into the fall season. You may have spent a little extra time during the summer engaging in some R & R and are now back to a regular work schedule. It’s probably a good time of year for you to review your......
• How To Maximize Your Article Directory Submission You are ready to kick off your article marketing campaign. You have some great aricles put together and you've located the best directories to promote your articles. But stop! There are still a few steps you will need to complete before you are really ready to begin submitting your articles......
• Making money with an eBay Store, Part 3: Starting and minding your business (This post is part of a series on Making Money with an eBay Store. The Introduction and table of contents to the series is here.) In the Introduction I mentioned some of the good things about starting a side business, especially the peace of mind that mastery of one's financial......

« Top 7 Steps to Remove Spyware from your Computer | Home | HomeAntivirus2009 – Don’t Waste Your Money »