Beruflich Dokumente
Kultur Dokumente
Chapter Four
Management Concepts
AIS in the Business World
Woburn Safari Park
Woburn Safari Park (www.woburn.co.uk/safari/) is an up close and personal
experience with animals from a variety of habitats around the world. As part of a
research project focused on business process management (BPM), Julien and Tjahjono
(2009) offered the following comments about the park:
WSP opened in 1970 as the second safari park in UK. From 1974, WSP was managed
by a circus family; the facilities in the park were originally designed to last 25 years, and
during that time no attempt was made to renew the facilities. When the current
management took over in 1993, apart from very low staff morale, the park was losing
money and the facilities needing replacement. Today, WSP is an award-wining
attraction that makes a valuable contribution to conservation and research. The
121-hectare safari park offers customers a full day out providing fun, entertainment,
and a relevant educational message. A day-out combines the excitement of the Safari
Drive with the fun of taking the Foot Safari around the Wild World Leisure Area. A day
out allows meeting the animals, enjoy the many demonstrations, keeper talks, and
feeding times.
The purpose of their research was to re-engineer WSPs business processes to focus
more on lean thinking.
Discussion Questions
1. Why is the study of management concepts, such as BPM, relevant to AIS?
2. What is BPM? What steps do managers commonly follow in a BPM project?
3. What risks are associated with WSPs operations? How can those risks be
managed?
Source: D. M. Julien and B. Tjahjono, 2009. Lean Thinking Implementation at a Safari Park, Business
Process Management Journal 15, no. 3.
62
hur25338_ch04_062-074.indd 62
22/09/11 3:47 PM
First Pages
Chapter 4
Management Concepts 63
Notice that the definition of ERM mentions entity objectives. COSO discusses five categories of objectives for most organizations: strategic, operations, reporting, compliance, and
safeguarding of resources. The objectives and categories overlap, of course; also, not all
categories are always under the direct control of management. Strategic and operations
objectives, for example, can be profoundly influenced by political and economic events
around the world.
Whereas the integrated framework for internal control had five components, the ERM
framework has eight, as shown in Figure 4.1. Like the five elements of the internal control
framework, the eight ERM elements are intimately linked to one another. Heres the way
COSO describes them in the executive summary of the ERM documents:
Internal EnvironmentThe internal environment encompasses the tone of an organization, and sets the basis for how risk is viewed and addressed by an entitys people, including risk management philosophy and risk appetite, integrity and ethical values, and the
environment in which they operate.
Objective SettingObjectives must exist before management can identify potential
events affecting their achievement. Enterprise risk management ensures that management
has in place a process to set objectives and that the chosen objectives support and align
with the entitys mission and are consistent with its risk appetite.
Event IdentificationInternal and external events affecting achievement of an entitys
objectives must be identified, distinguishing between risks and opportunities. Opportunities are channeled back to managements strategy or objective-setting processes.
Risk AssessmentRisks are analyzed, considering likelihood and impact, as a basis for
determining how they should be managed. Risks are assessed on an inherent and a residual basis.
hur25338_ch04_062-074.indd 63
22/09/11 3:47 PM
First Pages
64 Part One
AIS Fundamentals
FIGURE 4.1
Enterprise Risk
Management
Framework
Internal environment
Monitoring
Information and
communication
Objective setting
Enterprise Risk
ManagementIntegrated
Framework
Control activities
Event identification
Risk assessment
Risk response
The objectives (strategic, operations, reporting, compliance, and safeguarding assets) represent what the organization is trying to accomplish. The eight components of the enterprise risk management framework help managers formulate plans for accomplishment.
A few years ago, I was a consultant for Dreambox Creations Inc. (www.dreamboxcreations.com/), a technology-based firm in Diamond Bar, California. My job was to work
with Dreamboxs management to develop an enterprise risk management plan. After some
discussion, we decided to use COSOs framework as the basis for the plan. Check out the
companys Web site, which will give you some context for the following excerpt from their
ERM plan.
1. Internal environment. Dreamboxs management had committed to developing an ERM
plan. It was growing as an organization and wanted to present a more sophisticated
image to clients and employeesboth current and prospective.
2. Objective setting. Dreambox had set a strategic goal of acquiring at least three new clients every year.
3. Event identification. If Dreambox lacked the staff with the skills and desire to pursue
new clients, it might not be able to achieve its strategic goal.
4. Risk assessment. The potential impact of that risk was great. At an inherent level, it was
also high. (Inherent risk is the raw risk, while residual risk is the risk that remains
after management takes some action. The higher the risk level, the greater the need to
address it.)
5. Risk response. Dreambox chose two of the four generic risk responses discussed in the
COSO framework: reducing and sharing.
6. Control activities. To reduce the risk of not achieving its strategic goal, Dreambox
developed a plan to hire additional marketing professionals whose main job would be to
hur25338_ch04_062-074.indd 64
22/09/11 3:47 PM
First Pages
Chapter 4
Management Concepts 65
pursue new clients. It also chose to share the risk by offering incentives to current clients
for referrals that resulted in additional business for Dreambox.
7. Information and communication. Dreambox planned several meetings with its staff to
explain the importance of ERM, the development of the ERM plan, and its implications
for the firm.
8. Monitoring. Dreambox assigned one of its three corporate officers the responsibility for
annually reviewing the plan. If updates were needed, they would be discussed with the
other corporate officers.
COSOs internal control framework was well received in the business community. The
ERM framework was more sharply criticized because it was much more general. From my
point of view, the ERM framework had to be more general: The kinds of risks organizations face and the ways they respond to them are much more diverse than matters related
to internal control. While not every organization has identical internal controls, all internal
control systems are attempting to respond to the same four purposes we discussed in
Chapter 3.
In early 2011, COSO released some additional documents related to ERM:
Embracing Enterprise Risk Management: Practical Approaches for Getting Started by
Frigo and Anderson
Developing Key Risk Indicators to Strengthen Enterprise Risk Management by Beasley,
Branson and Hancock.
You can access both documents on the COSO Web site (www.coso.org). The next two sections of this chapter look at ideas related to business process management.
hur25338_ch04_062-074.indd 65
4.1
22/09/11 3:47 PM
First Pages
66 Part One
AIS Fundamentals
Although every BPM project is unique in some way, certain generic activities are common to most of them. Seppanen, Kumar, and Chandra (2005) suggested the following
sequence as a generalized model of BPM.
1.
2.
3.
4.
5.
6.
7.
How is BPM related to your study of accounting information systems? Good question!
Consider the following points to help understand why AIS students should know something about business process management:
1. BPM can assist managers in providing accounting information that conforms to elements of the FASB Conceptual Framework. Refer back to Figure 1.1, which illustrates
the conceptual framework. Managing business processes can ensure that relevant, reliable information is furnished in a cost-effective way.
2. BPM can help managers promote strong internal control. You probably recall that internal control has four main purposes, one of which is enhancing operating efficiency. Periodically examining business processes to see how they can be improved helps achieve
that goal.
3. BPM frequently involves strategic uses of information technology, such: relational databases, enterprise resource planning systems, and general ledger software.
4. BPM is a natural outgrowth of accountants intimate involvement with business processes. As a future accounting professional, your work will frequently focus on business
processes: documenting them (flowcharts, data flow diagrams, REA models), designing
inputs and outputs for them (sales invoices, purchase requisitions, production cost
reports), and auditing them (financial, operational, compliance).
Next, lets turn our attention to some fundamental ideas associated with business process management.
BASIC PRINCIPLES
You can learn more
about Roberts company
on its Web site: www
.erpsolutions.net.
As part of my background research for this chapter, I interviewed my friend and former
student, Robert J. Eppele II. Robert is the chief information officer (CIO) for ERP Solutions LLC; you can learn more about his company on its Web site: www.erpsolutions.net.
He shared these important ideas about business process management:
1. Understand how business processes interact with/support organizational strategy. As
you may have learned in a management class, strategy refers to the ways an organization gains a competitive advantage in its markets. In todays on-demand, knowledgedriven economy, organizations business processes can be key to creating and sustaining
a competitive advantage in the marketplace.
2. Move away from the weve always done it this way mentality. Be open to alternatives.
Business processes often originate based on some organizational need. For example,
many medical offices have historically relied on paper documents for things like patient
hur25338_ch04_062-074.indd 66
22/09/11 3:47 PM
First Pages
Chapter 4
3.
4.
5.
6.
7.
Management Concepts 67
charts and prescriptions; in the last decade, however, IT professionals have developed
cost effective, efficient ways to maintain those records electronically.
Enlist top management support; ensure that top management can describe current business processes before trying to reengineer/maintain/modify the processes. Weve already talked about the COSO frameworks for internal control and enterprise risk
management; in both frameworks, the tone at the top is an important factor. The same
is true for BPM: Without top management support, most efforts will be doomed to failure. In addition, to support and lead BPM efforts effectively, top management needs to
understand the way things currently work in the organization.
Managing business processes is fundamentally about people, not technology or documents. Its important to hire people who can think beyond their little piece of the world
and see how what they do fits into the bigger picture. BPM requires a holistic view of
the organizationone that moves beyond thinking about whats best for your department to thinking about how the organization as a whole can create value for its
stakeholders.
Dont rely on external consultants to the exclusion of internal employees, Value the experience of people in the organization who are close to the process. This point might strike
you as a bit odd, since both Robert and I have worked as external consultants in many
organizations. But it is 100 percent true! Far too many managers, when confronted with
a complex problem, advocate hiring an external consultant as a first step. While doing so
has many advantages, external consultants rarely have the intimate familiarity of internal
employees when it comes to BPM. Ive often found that a team approach, combining
both employees and consultants, produces very positive results.
When using consultants, make sure the task is well defined, with specific deliverables
defined by the company. This idea reminds me of something Lewis Carroll wrote in
Alices Adventures in Wonderland: If you dont know where you are going, any road
will take you there. In other words, outcomes for a BPM project should be defined in
advance; otherwise, the project may grow out of control, costing both time and money
without achieving solid results.
Communicate early; communicate often. Deal immediately with objections/issues as
they arise. BPM, like most important organizational initiatives, needs to be an open,
transparent process. The best plans are developed by a team of people through a process
of dialogue and feedback, not by one or two people sitting in an office for several
hours.
Well take a closer look at how the steps and principles of BPM are applied later in the
text.
hur25338_ch04_062-074.indd 67
22/09/11 3:47 PM
First Pages
68 Part One
AIS Fundamentals
So what are some of the behavioral issues associated with AIS? Consider the
following list:
Many people are uncomfortable with change. So, if you are moving an AIS from paperbased to technology based, making a business process more efficient, or introducing
new internal controls, some folks will resist on principle.
Fraud is a serious problem in all types of organizations. In its 2010 Report to the Nations
on Occupational Fraud and Abuse, the Association of Certified Fraud Examiners (www
.acfe.com) estimated that the typical organization loses 5% of its annual revenue to
fraud. Applied to the estimated 2009 Gross World Product, this figure translates to
a potential global fraud loss of more than $2.9 trillion (ACFE, 2010).
Business today is a global endeavor. So, people in organizations must learn new languages, cultures and customs.
When elements of an AIS change, people need to be trained in new technologies, processes and procedures to be effective. Whether the training is done in a classroom or
online format, it involves human behavior.
Dozens, perhaps hundreds, of theories exist to help us understand human behavior. One
Ive used a lot is Vrooms expectancy theory (1964). It has stood the test of time both in
research and in practiceprobably because it is easy to understand and practical. Expectancy theory says that motivation is the product of three factors:
Expectancy: If I put in the effort toward achieving a goal, will I be successful?
Instrumentality: If I achieve the goal, will I be rewarded?
Valence: Do I value the reward?
Vroom put them together in a simple, yet elegant, formula to emphasize their
relationship:
Motivation 5 Expectancy 3 Instrumentality 3 Valence
Notice that the three factors are multiplied, not added, to achieve motivation. So, if just one
of the three factors is zero, motivation will be zero as well.
How would Vrooms expectancy theory be applied within the context of accounting
information systems? Earlier in this chapter, you read about Dreambox Creations enterprise risk management plan. The officers of Dreambox were highly motivated to develop
and implement the plan; Table 4.1 shows how the three elements of expectancy theory
might look in that context:
TABLE 4.1
Factor
General Question
Application to Dreambox
Expectancy
Instrumentality
Valence
hur25338_ch04_062-074.indd 68
22/09/11 3:47 PM
First Pages
Summary
4.2
This chapter has been all about the management issues youll need to consider in AIS
work. Here is a summary of its main points, organized based on the expected outcomes
from the beginning of the chapter:
1. Summarize and explain the importance of COSOs Enterprise Risk Management Integrated Framework. COSOs ERM framework comprises eight elements: internal environment, objective setting, event identification, risk assessment, risk response, control
activities, information and communication, monitoring. The framework is important
because it gives business professionals a structured, concrete way to manage risk
throughout the organization. It also allows them to change and adapt their risk management procedures over time as internal and external environments change.
2. Define business process management, including a generalized model of BPM. BPM has
been defined in many different ways. Fundamentally, it is a set of ideas associated with
making virtually any business process more effective and efficienthelping ensure that
it creates value for organizational stakeholders. The generalized model of BPM discussed in the chapter comprises seven steps:
a.
b.
c.
d.
e.
f.
g.
3. List and discuss some basic principles of business process management. The chapter
also presented seven basic principles of BPM:
a. Understand how business processes interact with/support organizational strategy.
b. Move away from the weve always done it this way mentality.
c. Enlist top management support.
d. Managing business processes is fundamentally about people, not technology/
documents.
e. Dont rely on external consultants to the exclusion of internal employees.
f. When using consultants, make sure the task is well defined, with specific deliverables defined by the company.
g. Communicate early; communicate often.
4. Explain expectancy theory. Vrooms expectancy theory is a way to understand and explain
human motivation in organizations. It comprises three elements: expectancy, instrumentality, and valence. Motivation is the product of the three; if any one of the factors is zero,
motivation will also be zero.
69
hur25338_ch04_062-074.indd 69
22/09/11 3:47 PM
First Pages
70 Part One
AIS Fundamentals
5. Apply all three topics within the context of accounting information systems. All three
areas can be applied in various ways when working with accounting information systems. The ERM framework can be used to assess and respond to the various types of
risk discussed in Chapter 3 (financial, operational, strategic, hazard). Business processes are central to AIS, as youll see later in the text. The principles of BPM outlined in
this chapter can be used to make those processes more effective and efficient. Since
every AIS involves people in some way, expectancy theory can be used to assess and
increase motivation.
Key Terms
Chapter
References
Association of Certified Fraud Examiners. 2010. Report to the Nations on Occupational Fraud and
Abuse. Downloaded 31 January 2011 from www.acfe.com.
Committee of Sponsoring Organizations of the Treadway Commission. 2004. Enterprise Risk Management: Integrated Framework. New York: Committee of Sponsoring Organizations of the Treadway Commission.
Harmon, P., and C. Wolf. 2008. The State of Business Process Management. San Francisco: Business Process Trends.
Seppanen, M., S. Kumar, and C. Chandra. 2005. Process Analysis and Improvement: Tools and
Techniques. 1st ed. New York: Irwin/McGraw-Hill.
SmartDraw.com . 2008. Standards and Methodologies. www.smartdraw.com/tutorials/bpm/
methodologies.htm (August 27).
Vroom, V. H. 1964. Work and Motivation. Jossey-Bass Publishing.
Wikipedia.com. 2008. Business Process Management. http://en.wikipedia.org/wiki/Business_
process_management (August 27).
End-ofChapter
Activities
hur25338_ch04_062-074.indd 70
22/09/11 3:47 PM
First Pages
Chapter 4
Management Concepts 71
In 2004, AOL used the principles and processes of business process management to
develop an electronic funds transfer system (EFTS) for processing employee expense
reimbursements and vendor invoices. Prior to the EFTS, such requests were processed
manually, consuming a lot of time and resources while offering very little flexibility for
customers. As a result of the EFTS implementation, AOL experienced improvements
in time, cost, customer satisfaction, and management control. Source: America Online,
Inc. Financial Services white paper, http://interfacing.com/uploads/File/aol.pdf
(September 9, 2008).
a. Use COSOs enterprise risk management framework to create an ERM plan for AOL.
b. How might AOLs management apply the steps and principles of business process management to develop their EFTS?
c. Consider an AOL employee who was fully supportive of the EFTS. Use expectancy theory
to explain the employees support.
d. In expectancy theory, all three elements must be present to provide motivation. Based
on AOLs EFTS project, suggest a scenario in which one or more of the elements is not
present.
Fraud detection.
Objective setting.
Control activities.
Monitoring.
2. Which of the following steps typically occurs first in business process management?
a.
b.
c.
d.
Expectancy.
Instrumentality.
Valence.
Conditioning.
hur25338_ch04_062-074.indd 71
22/09/11 3:47 PM
First Pages
72 Part One
AIS Fundamentals
great lengths to explain why the ERM framework was needed and how it relates to the
internal control framework. Read their explanation at www.coso.org. Are both frameworks needed? Do both frameworks add value to organizations? Justify your responses.
5. Field exercises.
a. The chapter discussed expectancy theory as a way of explaining motivation. But, researchers
and practitioners have suggested many other theories, such as Maslows hierarchy of needs,
Herzbergs two-factor theory, and McClellands needs theory. Research one or more of those
theories (or others suggested by your instructor). Compare and contrast them to expectancy
theory.
b. Search the Internet and/or your schools library to find an example of a successful BPM
project. Summarize the project. To what extent does the case follow the seven basic steps
suggested by Seppanen, Kumar, and Chandra? The BPM principles suggested by Eppele?
c. If youre like students at my university, you may be frustrated by some of your schools
processessuch as the process of registering for classes, purchasing textbooks, or paying
fees. Use the steps and principles of business process management to suggest a way to
improve a process that frustrates you.
6. Enterprise risk management. Which element of the COSO ERM framework is most
closely associated with each of the following?
a. ALG Corporation bonds key employees.
b. Based on previous experience, TRG Corporations management believes the risk of inventory shortages is moderate.
c. BPC Corporation implements a profit-sharing plan as a way to motivate managers to control
costs.
d. BRN Corporations board of directors hires a consultant to explain ERM.
e. CNV Corporations managers accept the risk of stock price decreases.
f. DTI Corporation holds quarterly staff lunches where employees discuss how they manage risk.
g. EIV Corporations president organizes monthly meetings for managers to discuss books and
articles related to ERM.
h. FLM Corporation operates manufacturing plants on three continents.
i. FPO Corporation follows a top-down model for strategic planning.
j. HRP Corporations internal audit department assesses and tracks the effectiveness of its
ERM plan.
k. Management at CNV Corporation determines the probability of a decrease in stock value is
very high.
l. MGG Corporation occasionally hires a consultant to provide feedback on its ERM plan.
m. RCH Corporations enterprise risk management department prepares and distributes a
monthly ERM newsletter.
n. SSO Corporation reviews and revises its strategic plan annually.
o. TRG Corporations managers want to avoid inventory shortages.
p. WRL Corporation does not use data encryption in its wireless network.
hur25338_ch04_062-074.indd 72
22/09/11 3:47 PM
First Pages
Chapter 4
Management Concepts 73
d. Lupe believes her companys new general ledger software is too complex to master.
e. Mark changed his major from finance to accounting because he heard jobs are more plentiful in accounting.
f. Richard has stopped suggesting business process improvements because his ideas are never
implemented.
Behavioral issues
Control activities
Define boundaries
Expectancy
Instrumentality
Internal environment
Map steps and flow
Risk responses
Valence
Well-defined tasks
a.
b.
c.
d.
e.
f.
g.
h.
i.
j.
hur25338_ch04_062-074.indd 73
Journal entries
Interviews
Financial statements
Expectancy theory
22/09/11 3:47 PM
First Pages
74 Part One
AIS Fundamentals
2. Employees of BRN Corporation are trying to convince the CEO of the importance of
enterprise risk management. The CEO comments: I cant really support this idea. Too
many organizations develop ERM plans, then put them on the shelf instead of implementing them. Which element of expectancy theory is reducing the CEOs motivation?
a.
b.
c.
d.
Expectancy
Valence
Instrumentality
Motivation
3. The first step in business process management is to select the process and define its boundaries. Which of the following is the best defined process within the context of BPM?
a.
b.
c.
d.
Selling assets
Posting journal entries to the ledger
Purchasing inventory
Financing operations
4. Which of the following is a key idea in both business process management and enterprise
risk management?
a.
b.
c.
d.
5. Which of the following statements best exemplifies one of the principles of BPM?
a.
b.
c.
d.
13. Statement evaluation. Please indicate whether each of the following statements is (i)
always true, (ii) sometimes true or (iii) never true. For those that are sometimes true,
explain when/under what circumstances they are.
a.
b.
c.
d.
e.
f.
g.
h.
i.
j.
hur25338_ch04_062-074.indd 74
22/09/11 3:47 PM