Robert Kugel's Analyst Perspectives

When the term “governance, risk and compliance” (GRC) was introduced almost 10 years ago, software for this purpose was not a real category but a loose grouping of disparate applications that had something to do with meeting the requirements of the recently passed Sarbanes-Oxley Act. (You can find my perspective on the GRC category from a couple of years ago here. Now, with the release 10.0 of SAP BusinessObjects GRC, SAP is taking another step toward making the software category a real,...

I have written before about enterprise risk management, which is an essential piece of both performance management and corporate governance. Every aspect of business entails risk. Everyone who makes a business decision is – whether consciously or not – making trade-offs between risk and reward. Assessing risk is tricky in business because it means different things to different people depending on where they work and their specific role in an organization. From a broad view, risk management...

The US Securities and Exchange Commission’s (SEC) “Interactive Data” initiative continues to progress forward. Thus far, some 1,500 corporations have filed their financial information using XBRL tags to facilitate review and analysis, of which almost 400 have had done detailed tagging of their footnotes. By June 2011 all public companies will have to provide an XBRL-tagged, interactive version of their financial statements. As I’ve noted in the past, I think companies should find ways to...

Ventana Research has just announced its Value Index for Financial Performance Management (FPM) for 2010. Our value indexes are user-focused assessments of how well software vendors and packages enable companies to improve their execution of core processes. This one is designed to help businesses, especially the finance organization, evaluate the FPM software suites offered by major vendors in the context of their specific needs. Ventana Research defines financial performance management as the...

For the past couple of years I’ve been asserting that most larger companies (those with 1,000 or employees) need to adopt a new approach to using software to handle their taxes comprehensively, both the direct sort (income taxes) and the indirect variety (sales and use taxes as well as value-added or goods and services taxes). This is a necessary response to an emerging challenge from more competent and determined tax enforcement by governments worldwide. It will require corporations to make...

Intacct, which offers cloud-based accounting software for small and smaller midsize companies is starting to put more emphasis on addressing the needs of project-oriented, professional services businesses. One of the challenges that these companies face is getting their accounting systems to support their business at a functional level. To be sure, any ERP system can account for projects, in the sense that they can aggregate labor and material costs attributed in some subcategory such as "new...

You really, really have to be a nerd to watch Jurassic Park and see the absence of separation of duties (SoD) and inadequate process controls as a core plot device. To explain, one of the pivots in the story line of Jurassic Park is the point where the villain of the story, “Dennis Nedry” decides to steal some dinosaur embryos and sell them. The company created some safeguards in their systems to prevent this from happening but (as usual) they were mainly designed to guard against outsiders,...