Business Processes & Automation

One-minute revision

• Expenditure cycle key control = three-way match (PO, receiving report, invoice)
• Vendor master file maintenance must be separate from payment processing (fictitious vendor risk)
• Payroll: HR adds employees, payroll processes — never the same person
• RPA risks: bot credentials/over-privilege, change control over bot logic, errors repeat at scale, loss of human review
• Automation moves controls to access, change management, and exception handling