nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Fraud Management

lkmcc

Hi - I'm not sure if this is the right place to post this, but I would appreciate any help :-)

I need to implement fraud management processes into our company (there are currently next to none in place), and I have spent many hours 'googling' but haven't come accross any fraud management systems imbedded into the MYOB software. Is this correct?

We currently use MYOB in probably it's most basic form so I know that it can do a lot more for us - can anyone point me in the right direction regarding fraud management or is this something that MYOB doesn't have? Eg, 2-person authorisation before uploading a batch payment file.

Any other fraud management strategies (besides 'knowing your staff' which most sites advise but it's very unhelpful) would be greatly appreciated.

Thanks in advance :-)

Find more posts tagged with

Accepted answers

All comments

The_Doc

Hi @Beansmutts

Whilst your advise is generically correct, unfortunately that part of MYOB's security overlay is so complex that any reliance on it as a means to limit fraud essentially worsens the situation in that - unless you understand this area totally it is too easy to leave other areas, unintentionally, wide open for fraud.

Certainly, this area is a starting point but unfortunaltely, as I have found, locking things down restricted staff so much they couldn't do there job and telling the boss you did it to stop possible fraud is likely create a whole new area of woes.

Yes - locking this area down is the beginning but unless you REALLY understand it it is likely just cause you a headache..

There are so many things long before you actually get to this area to implemment.

eg. staff access to the file could only be through an email registered to the company and the 2FA had to be via 'that email' and NEVER allowed on the staff members phone.

And staff were never allowed to put their business email account onto their phone.

These are just basic security measures and there are many more that are done long before a staff member gets anywhere near the MYOB file.

Locking out 'Prepare Electronic Payments' is unfortunately a false sense of security if staff can get at the supplier or employee bank details in MYOB and change them - electronic payments merely inherets these (which may already be changed).

However, as previously suggested - I never import an MYOB template to the bank and use already built templates in the banking profile so I never inheret new account numbers.

Security is a very complex problem that is not merely plugging possible holes where fraudsters can crawl through.

The Doc

Beansmutts

Hi lkmcc

Have a look at the Manage roles in (Setup/Users) you can restrict Prepare Electronic Payments to Administrator Only

There are a multitude of options for users.

Gill

lkmcc

Hi @The_Doc

I am a newbie user just seeking assistance to protect the company and myself in a new position I am moving into after doing some risk analysis and finding holes - I'm not asking for step by step instructions, just suggestions on MYOB fuctions that I can look into so that I can better utilise MYOB and protect those that have access and the company. I am aware that most fraud happens from trusted employees, hence my comment about the majority of websites suggesting to "know your employees" - not very helpful or robust at all.

I have never used this forum before and as a relatively basic MYOB user looking to learn and implement change within my organisation, I thought this was the place to ask questions and learn - seems I will need to seek guidance from elsewhere.

Thanks,

lkmcc

The_Doc

Hi @lkmcc

Not sure how to answer this without writing a book, though I am not trying to be flippant.

Over almost 30 years of using MYOB and doing book-keeping I can say 99% of fraud has been internal and by trusted employees.

There are certainly many many simple things you can implement in MYOB security features that can eliminate most of the opportunities - however, unfortunately this forum makes it a bit difficult to air such things without actual proof of credentials in that we actually don't know who you are - whether you are an employee or owner and the post may be a simple and innocent question, but it may be mining to gather clues on how to do (not so innocent things) in MYOB.

I think it behoves us on the forum, those who have substantial knowledge on how MYOB functions, and this certainly is intented for good use - but unfortunately I have seen bad book-keepers and have been asked to audit files by auditors to find problems.

I would be quite happy to write a checklist of such things, as would other very experienced CC on this forum but I would suspect their views to be similar to mine - we cannot authenticate who is asking.

The Doc