The risks being discussed here are specific to ERP systems used.
Major feature of an ERP System is Central Database. As the complete data is stored centrally at one place, ensuring safety of data and minimising risk of loss of data is a big challenge. In Non-Integrated System, data is stored by each department separately; hence this risk is low in such an environment. In an ERP environment, two major risks are faced by any organization:
ERP system implementation is a huge task and requires lot of time, money and above all patience. The success or failure of any ERP or saying it in terms of payback or ROI of an ERP, is dependent on its successful implementation and once implemented proper usage.
Tables 2.3.1(A,B,C,D,E) provide extensive discussion on the issues – People, Process, Technological, other implementation and post implementation issues that arise during implementation and related controls respectively.
In computer systems security, Role-Based Access Control is an approach to restricting system access to authorized users. RBAC sometimes referred to as RoleBased Security is a policy neutral access control mechanism defined around roles and privileges that lets employees having access rights only to the information they need to do their jobs and prevent them from accessing information that doesn't pertain to them. It is used by most enterprises and can implement Mandatory Access Control (MAC) or Discretionary Access Control (DAC).
The components of RBAC such as role-permissions, user-role and role-role relationships make it simple to perform user assignments. RBAC can be used to facilitate administration of security in large organizations with hundreds of users and thousands of permissions. Roles for staff are defined in organization and permission to access a specific system or perform certain operation is defined as per the role assigned. E.g. a junior accountant in accounting department is assigned a role of recording basic accounting transactions, an executive in human resource department is assigned a role of gathering data for salary calculations on monthly basis, etc.
Types of Access
While assigning access to Master Data, Transaction Data and Reports to different users; following options are possible.
(i) Create – Allows to create data;
(ii) Alter – Allows to alter data;
(iii) View – Allows only to view data; and
(iv) Print – Allows to print data.
Example 4: Let us consider a small case study for better understanding of Role Based Access and Controls in Financial and Accounting Systems. Indradhanu Consulting Private Limited, a company dealing in project management is having different users as given in the Table 2.3.2 under.
Table 2.3.2: Users Database of Indradhanu Consulting Private Limited (Illustrative)
The fundamental objectives of an audit of controls do not change in an ERP environment. When evaluating controls over ERP systems, decisions must be made regarding the relevance of operational internal control procedures to Information Technology (IT) controls. Specific control procedures for audit objectives must be tested. ERP systems should produce accurate, complete, and authorized information that is supportable and timely. In a computing environment, this is accomplished by a combination of controls in the ERP System, and controls in the environment in which the ERP system operates, including its operating system. Controls are divided into General Controls and Application Controls.
Some of the questions auditors should ask during an ERP audit are pretty much the same as those that should be asked during development and implementation of the system:
Auditing aspects in case of any ERP system can be summarized as under:
(i) Auditing of Data
(ii) Auditing of Processes
As everybody is familiar with working environment in a Chartered Accountant (CA) firm, let us consider possibility of implementing ERP system in a CA Firm.
Example 5: Nirman Infrastructures Pvt. Ltd. a client of Ghate Deshpande & Co. (a CA Firm) receives a notice for scrutiny assessment from Income Tax Department. Following shall be the events in normal case.
(i) Client informs about receipt of notice to CA. Pankaj Deshpande (Partner) on phone and sends the copy of notice to CA Firm.
(ii) Notice is received at CA firm, read and understood. A task for giving reply to Income Tax Department is allotted to Sachi Dongre, an article clerk.
(iii) Sachi asks for some original documents (PAN, Memorandum of Articles, Agreements etc.) from client for working. These documents need to be returned to client after the work.(iv) Sachi works on this task, prepares the reply and submits it with Income Tax Department. Also, She updates CA. Pankaj Deshpande and Mayura (Accountant) about it.
(v) Bill is prepared by Mayura and approved by CA. Pankaj Deshpande.
(vi) Bill is submitted with client.
(vii) Documents are returned to client.
(viii) Cheque received from client against the bill submitted.
(ix) Receipt is recorded in books of accounts.
This is how a simple case is handled in a CA Firm. Let us now discuss important points regarding this case. In case of any ERP System, two aspects are very important – Communication (Internal and External) and Documentation.
Refer Fig. 2.5.1 to understand the workflow of CA Firm using Integrated System.
In this whole process, two important aspects, i.e. Communication and Documentation are taken care of in the best possible manner. Instead of a person communicating with other, system is communicating automatically after every updation. Fig. 2.5.2 showing different people connected to central database.
In case of an Integrated System, there shall be only one system of communication with others. But in case of non-integrated system people use multiple modes for communication like making a phone call, sending SMS, Email, WhatsApp or personal meeting. But the major problem with these multiple option is that there is no inter-connectivity between these modes and hence track of the overall process is not available.
A Business Process consists of a set of activities that are performed in coordination in an organizational and technical environment. These activities jointly realize a business goal. Each business process is enacted by a single organization, but it may interact with business processes performed by other organizations. To manage a process-
Process management is based on a view of an organization as a system of interlinked processes which involves concerted efforts to map, improve and adhere to organizational processes; whereas traditional organizations are composed of departments and functional stages, this definition views organization as networks or systems of processes. Process orientation is at the core of BPM.
As discussed earlier, a Business Process is a prescribed sequence of work steps performed to produce a desired result for the organization. A business process is initiated by a kind of event, has a well-defined beginning and end, and is usually completed in a relatively short period. Organizations have many different business processes such as completing a sale, purchasing raw materials, paying employees and paying vendors, etc. Each of the business processes has either a direct or indirect effect on the financial status of the organization. The number and type of business processes and how the processes are performed would vary across enterprises and is also impacted by automation. However, most of the common processes would flow a generic life cycle.
Example 6: Accounting Process Flow
Accounting or Book-keeping cycle covers the business processes involved in recording and processing accounting events of a company. It begins when a transaction or financial event occurs and ends with its inclusion in the financial statements. A typical life cycle of an accounting transaction may include the following transactions as depicted in Fig. 2.6.1:
(a) Source Document: A document that captures data from transactions and events.
(b) Journal: Transactions are recorded into journals from the source document.
(c) Ledger: Entries are posted to the ledger from the journal.
(d) Trial Balance: Unadjusted trial balance containing totals from all account heads is prepared.
(e) Adjustments: Appropriate adjustment entries are passed.
(f) Adjusted Trial balance: The trial balance is finalized post adjustments.
(g) Closing Entries: Appropriate entries are passed to transfer accounts to financial statements.
(h) Financial statement: The accounts are organized into the financial statements.
A. Business Categories of BPM
There are three different nature and types of businesses that are operated with the purpose of earning profit. Each type of business has distinctive features.
B. Functional Modules of ERP
Business process may change per type of business. There may be different business units within a business. Hence different modules are possible in an integrated system. There may be modules as under. Fig. 2.6.2 shows different business process modules in ERP System. There may be some other modules also. Different types of industries require different modules.
Fig. 2.6.2: ERP Modules(a) Financial Accounting Module
This module is the most important module of the overall ERP System and it connects all the modules to each other. Every module is somehow connected with module.
Following are the key features of this module.
(b) Controlling Module
This module facilitates coordinating, monitoring, and optimizing all the processes in an organization. It controls the business flow in an organization. This module helps in analysing the actual figures with the planned data and in planning business strategies. Two kinds of elements are managed in Controlling Module − Cost Elements and Revenue Elements. These elements are stored in the Financial Accounting module.
Key features of this module are as under:
(c) Sales and Distribution Module
Sales and Distribution is one of the most important modules. It has a high level of integration complexity. Sales and Distribution is used by organizations to support sales and distribution activities of products and services, starting from enquiry to order and then ending with delivery.
Sales and Distribution can monitor a plethora of activities that take place in an organization such as products enquires, quotation (pre-sales activities), placing order, pricing, scheduling deliveries (sales activity), picking, packing, goods issue, shipment of products to customers, delivery of products and billings. In all these processes, multiple modules are involved such as FA (Finance & Accounting), CO (Controlling), MM (Material Management), PP (Production Planning), LE (Logistics Execution), etc.; which shows the complexity of the integration involved.
Key features of Sales and Distribution Module are discussed as under:
Sales and Distribution Process (Referring Fig. 2.6.3)
(d) Human Resource Module
This module enhances the work process and data management within HR department of enterprises. Right from hiring a person to evaluating one’s performance, managing promotions, compensations, handling payroll and other related activities of an HR is processed using this module. The task of managing the details and task flow of the most important resource i.e. human resource is managed using this module.
The most important objective of master data administration in Human Resources is to enter employee-related data for administrative, time-recording, training and payroll purposes. Payroll and Personnel departments deal with Human Resource of the organization. This department maintains total employee database. Wage, time and attendance related information comes to this department. They also prepare wage sheet for workmen; handle Provident Fund, ESI related formalities. This is perhaps the only module, which exchange very few information with other modules.
Concerning manpower, its requirement and utilization is one of the major chunks of profit for an organization. So, in this regard, every aspect of business transaction is taken care of by defining the master shifts master, Provident Fund (PF) ESI (Employees’ State Insurance) master, leave, holiday, loans, employee master, operations and suboperations masters etc. Also, the various input transaction such as Attendance Entry, Leave, holiday, Earning/Deduction entry, Advances etc. Finally, different types of Payroll reports, which can be of various types according to specified company standard. Fig. 2.6.4 showing processes involved in Human Resource Department.
(e) Production Planning (PP) Module
Production Planning (PP) Module is another important module that includes software designed specifically for production planning and management. This module also consists of master data, system configuration and transactions to accomplish plan procedure for production. PP module collaborates with Master Data, Sales and Operations Planning (SOP), Distribution Resource Planning (DRP), Production Planning, Material Requirements Planning (MRP), Capacity Planning, Product Cost Planning and so on while working towards production management in enterprises.
Conversion into Work In Process (WIP) may include more than one step. Also, conversion into Finished Goods may include packing process also.
(f) Material Management (MM) Module
Material Management (MM) Module as the term suggests manages materials required, processed and produced in enterprises. Different types of procurement processes are managed with this system. Some of the popular sub-components in MM module are vendor master data; consumption based planning, purchasing, inventory management, invoice verification and so on. Material Management also deals with movement of materials via other modules like logistics, Supply Chain Management, sales and delivery, warehouse management, production and planning. Fig. 2.6.6 showing overall purchase process.
Please note that Purchase Order and Material Receipt are not part of financial accounting and does not affect trial balance. But these transactions are part of overall Financial and Accounting System.
(g) Quality Management Module
Quality Management (QM) Module helps in management of quality in productions across processes in an organization. This module helps an organization to accelerate their business by adopting a structured and functional way of managing quality in different processes. Quality Management module collaborates in procurement and sales, production, planning, inspection, notification, control, audit management and so on. Fig. 2.6.7 showing Process in Quality Management Module.
Quality Management Process includes the following:
(h) Plant Maintenance Module
Plant Maintenance (PM) is a functional module which handles the maintaining of equipment and enables efficient planning of production and generation schedules. This application component provides us a comprehensive software solution for all maintenance activities that are performed within a company. It supports cost-efficient maintenance methods such as risk-based maintenance or preventive maintenance, and provides comprehensive outage planning and powerful work order management.
Objectives of Plant Maintenance Module
(i) To achieve minimum breakdown and to keep the plant in good working condition at the lowest possible cost.
(ii) To keep machines and other facilities in a condition that permits them to be used at their optimum (profit making) capacity without any interruption or hindrance.
(iii) To ensure the availability of the machines, buildings and services required by other sections of the factory for the performance of their functions at optimum return on investment whether this investment be in material, machinery or personnel.
Fig. 2.6.8 is showing process in Plant Maintenance.
Different PM reports are required to review PM information, such as:
(i) Project Systems Module
This is an integrated project management tool used for planning and managing projects and portfolio management. It has several tools that enable project management process such as cost and planning budget, scheduling, requisitioning of materials and services, execution, until the project completion. Fig. 2.6.9 showing process in Project Systems.
Project System is closely integrated with other ERP modules like Logistics, Material Management, Sales and Distribution, Plant Maintenance, and Production Planning module etc. Before a project is initiated, it is required that project goal is clearly defined and the activities be structured. The Project Manager has a task to ensure that these projects are executed within budget and time and to ensure that resources are allocated to the project as per the requirement.
In Project System, each process has a defined set of tasks to be performed known as process flow in Project Lifecycle. When a project request is received, a project is created and it undergoes the following steps in project process flow/lifecycle.
(j) Supply Chain Module
A Supply Chain is a network of autonomous or semi-autonomous business entities collectively responsible for procurement, manufacturing, and distribution activities associated with one or more families of related products. This module provides extensive functionality for logistics, manufacturing, planning, and analytics involving the activities like inventory, supply chain planning, supplier scheduling, claim processing, order entry, purchasing, etc. In other words, a supply chain is a network of facilities that procure raw materials, transform them into intermediate goods and then finished products, and then finally deliver the products to customers through a distribution system or a chain.
You can optimize your supply chain for months in advance; streamline processes such as supply network, demand, and material requirement planning; create detailed scheduling; refine production integration and maximize transportation scheduling. Fig. 2.6.10 showing process in supply chain.
In Supply Chain Management System, any product which is manufactured in a company, first reaches directly from manufacturer to distributors where manufacturer sells the product to the distributor with some profit of margin. Distributors supply that product to retailer with his/her profit and then finally customers receive that product from retailer. This is called Supply Chain Management System which implies that a product reaches from manufacturer to customer through supply.
(k) Customer Relationship Management (CRM)
Customer Relationship Management is a system which aims at improving the relationship with existing customers, finding new prospective customers, and winning back former customers. This system can be brought into effect with software which helps in collecting, organizing, and managing the customer information. Information in the system can be accessed and entered by employees in different departments, such as sales, marketing, customer service, training, professional development, performance management, human resource development, and compensation. Details on any customer contacts can also be stored in the system. The rationale behind this approach is to improve services provided directly to customers and to use the information in the system for targeted marketing.
CRM manages the enterprise’s relationship with its customers. This includes determining who the high-value customers are and documenting what interactions the customers have had with the enterprise. Only large ERP packages have a CRM module. The CRM module uses the existing ERP tables as the source of its data. This is primarily the Contact, Customer, and Sales tables. CRM does not exchange transactions with other modules as CRM does not have transactions. Implementing a CRM strategy is advantageous to both small-scale and large-scale business ventures. Key benefits of a CRM module are as under.
Any ERP System is like a human body. There are different units and each unit relates to another units. All the units must work in harmony with other units to generate desired result. Following points are important for integration of modules with Financial and Accounting System:
I. Integration Points
Some of the points regarding integration with other modules are discussed here.
(i) Material Management Integration with Finance and Controlling (FICO)
It is integrated in the area like Material Valuation, Vendor payments, Material costing etc. Whenever any inventory posting is done, it updates the General Ledger (G/L) accounts online in the background. Logistics invoice verification will create vendor liability in vendor account immediately on posting the document. Any advance given against the purchase order updates the Purchase Order history. For every inventory posting, there is corresponding Controlling document to update profit centre accounting reporting.
(ii) Human Resource Module Integration with Finance and Controlling
Attendance and leave record is used for calculation of salary on monthly basis. Salary is also a part of financial accounting. Hence salary processed and calculated by Human Resource Module shall be integrated with Finance & Controlling Module.
(iii) Material Management Integration with Production Planning (PP)
It is integrated in the areas like Material Requirement Planning, Receipts/issues against production orders, Availability check for stocks etc. Material requirement Planning is based on Stocks, expected receipts, expected issues. It generates planned orders or purchase requisitions which can be converted to purchase orders/Contracts. Inventory Management is responsible for staging of the components required for production orders. The receipt of the finished products in the Warehouse is posted in Inventory Management.
(iv) Material Management Integration with Sales and Distribution (SD)
It is integrated in the areas like Delivery, Availability Check, Stock transfers requirements etc. As soon as a sales order is created, it can initiate a dynamic availability check of stocks on hand. When the delivery is created, the quantity to be delivered is marked as “Scheduled for delivery”. It is deducted from the total stock when the goods issue is posted. Purchase order can be directly converted to delivery for a stock transfer requirement.
(v) Material Management Integration with Quality Management (QM)
It is integrated with QM for Quality inspection at Goods Receipt, In-process inspection etc. In the case of a goods movement, the system determines whether the material is subject to an inspection operation. If so, a corresponding activity is initiated for the movement in the Quality Management system. Based on quality parameters vendor evaluation is done.
(vi) Material Management Integration with Plant Maintenance (PM)
The material/service requirement is mentioned in Maintenance order. This leads to generation of Purchase Requisition. This PR will be converted to Purchase Order by MM. The goods for a PO will be in warded to Maintenance by MM. The spares which were reserved for maintenance order will be issued by MM against the reservation number.
Example 7: Let us consider a case of an ice-cream manufacturing company to see various examples of ERP modules.
A. Material Management Module
(a) Placing a purchase order for purchase of raw material like milk, dry fruits, milk powder, butter, essence, sugar, etc. on an approved vendor.
(b) Received raw material at stores.
B. Production Module
(a) Seeking raw material from stores.
(b) Converting raw material into WIP and WIP into finished goods.
(c) Sending the finished goods to cold room.
C. Supply Chain Module
(a) Distributing finished goods, i.e. ice cream to the customers.
(b) Keeping a track of all deliveries.
(c) Planning and scheduling of all deliveries.
D. Finance & Accounting
(a) Recording of all financial transactions.
(b) Payments to vendors.
(c) Collections from customers.
E. Human Resource Module
(a) Keeping record of all human resource related activities.
(b) Attendance, leave, salary calculations, joining and leaving of employees.
F. Sales & Distribution
(a) Performing pre-sales activities.
(b) Recording sales orders.
(c) Keeping track of all customer related transactions till collection against invoices.
30 videos|58 docs
|
|
Explore Courses for CA Intermediate exam
|