Hi Beansmutts
Whilst your advise is generically correct, unfortunately that part of MYOB's security overlay is so complex that any reliance on it as a means to limit fraud essentially worsens the situation in that - unless you understand this area totally it is too easy to leave other areas, unintentionally, wide open for fraud.
Certainly, this area is a starting point but unfortunaltely, as I have found, locking things down restricted staff so much they couldn't do there job and telling the boss you did it to stop possible fraud is likely create a whole new area of woes.
Yes - locking this area down is the beginning but unless you REALLY understand it it is likely just cause you a headache..
There are so many things long before you actually get to this area to implemment.
eg. staff access to the file could only be through an email registered to the company and the 2FA had to be via 'that email' and NEVER allowed on the staff members phone.
And staff were never allowed to put their business email account onto their phone.
These are just basic security measures and there are many more that are done long before a staff member gets anywhere near the MYOB file.
Locking out 'Prepare Electronic Payments' is unfortunately a false sense of security if staff can get at the supplier or employee bank details in MYOB and change them - electronic payments merely inherets these (which may already be changed).
However, as previously suggested - I never import an MYOB template to the bank and use already built templates in the banking profile so I never inheret new account numbers.
Security is a very complex problem that is not merely plugging possible holes where fraudsters can crawl through.
The Doc
