Vendor Master Controls / Audit Checks
LOGO
Process Area Process Sub Area
NONAME CONSULTANTS
Accounts Payable Vendor Master File Checklist Customized? YES NO Process Ref. If “YES”, Approved by AP/01/01
Name of Client:
Assignment:
Job No:
Introduction
This checklist shall outline the controls necessary for the creation and maintenance of vendor information in a VMF in a typical ERP environment. This may be applicable for most accounting systems which we generally experience during our audits and similar assignments. The applicability of these controls generally directly depends on the magnitude of the business (size of the operations) which we are reviewing. Always consult your senior, supervisor or your assistant manager before applying all the controls detailed below to your context.
Checklist (IC)
Ref. No. 1.1 Process Creation/editing of vendors Standard Internal Controls Access to create and edit Vendor Master File (VMF) should be restricted to one officer only (preferably one in an executive level). Or the total responsibility should be given to an officer in the Corporate IT. Any type of function relating to payment processing (entry, posting and approval) should not be given to the officer who is in charge of VMF (that is to create/edit) as this can lead to financial malpractices / fraud. A defined guideline should be available to clearly direct the vendor creation process. Use of a standard naming convention to create supplier names in the vendor master record, so that this would enable identification of vendors who are already in the database (to avoid duplication). Use of a form for creating/editing vendors should be used. This should be approved by the Head of Procurement (or a similarly designated individual). Using details of supplier registration will be ideal. (This is to avoid creation of “ghost vendors”.) All forms should be filed in sequential order.
Criticality (H, M, L)
Y / N
Other Compensatory Controls (if available)
Risk Rating
WP Ref.
Other
Process Area Process Sub Area
NONAME CONSULTANTS
Accounts Payable Vendor Master File Checklist Customized? YES NO Process Ref. If “YES”, Approved by AP/01/01
Name of Client:
Assignment:
Job No:
Introduction
This checklist shall outline the controls necessary for the creation and maintenance of vendor information in a VMF in a typical ERP environment. This may be applicable for most accounting systems which we generally experience during our audits and similar assignments. The applicability of these controls generally directly depends on the magnitude of the business (size of the operations) which we are reviewing. Always consult your senior, supervisor or your assistant manager before applying all the controls detailed below to your context.
Checklist (IC)
Ref. No. 1.1 Process Creation/editing of vendors Standard Internal Controls Access to create and edit Vendor Master File (VMF) should be restricted to one officer only (preferably one in an executive level). Or the total responsibility should be given to an officer in the Corporate IT. Any type of function relating to payment processing (entry, posting and approval) should not be given to the officer who is in charge of VMF (that is to create/edit) as this can lead to financial malpractices / fraud. A defined guideline should be available to clearly direct the vendor creation process. Use of a standard naming convention to create supplier names in the vendor master record, so that this would enable identification of vendors who are already in the database (to avoid duplication). Use of a form for creating/editing vendors should be used. This should be approved by the Head of Procurement (or a similarly designated individual). Using details of supplier registration will be ideal. (This is to avoid creation of “ghost vendors”.) All forms should be filed in sequential order.
Criticality (H, M, L)
Y / N
Other Compensatory Controls (if available)
Risk Rating
WP Ref.
Other