2.4 Computerized Accounting Systems & Internal Controls

Computerized Accounting Systems

While understanding manual double-entry bookkeeping is vital for learning the principles of accounting, modern businesses almost exclusively use computerized accounting systems. These range from simple off-the-shelf software for small businesses (e.g., Xero, QuickBooks) to complex Enterprise Resource Planning (ERP) systems (e.g., SAP, Oracle) used by multinational corporations.

Features and Integration

The primary advantage of computerized systems is the automation of the accounting cycle.

In a manual system, a bookkeeper must enter a transaction in a day book, sum the day book, and then manually write the debit and credit postings into the general ledger.

In a computerized system, the modules are integrated. When a user inputs a sales invoice into the Sales Module, the system automatically and instantaneously:

1. Updates the customer's balance in the Receivables module.
2. Credits the Sales account in the General Ledger.
3. Credits the Output Sales Tax account.
4. Debits the Receivables Control account.
5. If a perpetual inventory system is used, it also automatically debits Cost of Sales and credits Inventory.

This immediate processing ensures that trial balances and financial reports can be generated in real-time, providing management with up-to-date information for decision-making.

ERP vs. Standalone Software

Standalone accounting software handles only financial data. An Enterprise Resource Planning (ERP) system integrates accounting with all other functions of a business across one centralized database. For example, when a customer places an order on the company website, the ERP system checks inventory levels, reserves the stock, schedules warehouse packing, generates the shipping manifest, and automatically creates and posts the accounting invoice. This eliminates data duplication and departmental silos.

Internal Controls in IT Environments

The reliance on IT systems introduces significant risks. Without proper controls, errors can be propagated instantly across the system, and unauthorized individuals could manipulate financial data. Internal controls are processes designed to provide reasonable assurance regarding the achievement of objectives in reliable financial reporting, effective operations, and compliance with laws.

In a computerized accounting environment, controls are generally categorized into general IT controls and application controls.

Application Controls (Input, Processing, Output)

Application controls apply to specific accounting applications (e.g., the payroll system or the sales ledger) to ensure data is accurate, complete, and authorized.

Input Controls: These are vital because "garbage in equals garbage out." They prevent errors at the point of data entry.

• Format Checks: Ensure data is entered in the correct format (e.g., a date field must be MM/DD/YYYY, or a text field cannot contain numbers).
• Range Checks: Ensure numerical data falls within predetermined acceptable limits. For example, a system might reject an hourly wage entry that is below the legal minimum wage or above $100 per hour to prevent typing errors.
• Check Digits: An algorithmic digit appended to an account number (like a barcode or credit card number). When typed, the system calculates the algorithm to verify the number is valid and hasn't been mistyped (e.g., transposing digits).
• Limit Checks: Similar to range checks but only have an upper limit (e.g., an invoice over $10,000 requires managerial override).
• Batch Totals: When processing a large batch of documents (e.g., 50 purchase invoices), the user manually calculates a total (e.g., the sum of the gross invoice values). After data entry, the system calculates its own total. If they match, it ensures all invoices were entered and amounts were typed correctly.

Processing and Output Controls: These ensure the system performs calculations correctly and that output (reports, cheques) is distributed only to authorized personnel.

General IT Controls

General controls relate to the overall IT environment and govern the development, maintenance, and security of all systems.

• Access Controls (Logical Security): Restricting system access to authorized users via unique User IDs, strong passwords, and multi-factor authentication (MFA). Crucially, this involves segregation of duties. A user who has the ability to create a new vendor in the system should not also have the ability to authorize payments to that vendor, to prevent fraud.
• Physical Security: Securing the physical servers and network infrastructure with locks, biometric scanners, and environmental controls (fire suppression, cooling).
• Backup and Recovery: Regular, automated data backups stored off-site or in the cloud. A comprehensive Disaster Recovery Plan (DRP) ensures the business can restore its financial systems quickly after a hardware failure, cyberattack, or natural disaster.
• Audit Trails: Computerized systems automatically generate audit logs tracking exactly which User ID performed which action at what timestamp. This allows auditors to trace any transaction from its origin to the financial statements and identifies who is responsible for data alterations.

By combining integrated software architecture with robust internal controls, modern accounting systems provide speed, accuracy, and security far surpassing traditional manual bookkeeping.