Small Business IT Governance: You really need it now

it-balancing-actBig changes are going on in the world of information technology and business.  Where social computing and  mobility are no longer purely consumer concerns, enterprise IT departments face a growing requirement to embrace user devices and access in environments which were once strictly and closely controlled.  Enterprise IT may be challenged when presented with user personal devices and demands for remote access to enterprise data, yet the governance of systems is generally well-defined and strictly performed.  In small business, however, the people, policy and process issues (collectively incorporated into “governance”) tend to be more organic, and the use of personal devices and open access is more frequently considered to be a normal part of the overall business IT profile.

It is a focus on defining controls and processes, and influencing the activities and attitudes of the people involved, which has become an essential requirement in small business.  Where management of information technology resources was not of great concern to the small business owner before, increased device and information mobility (removal of physical boundaries) and erosion of logical boundaries around personal and business computing have become a really big deal for everyone in business. Small businesses just don’t often have departments of people working on the problem.

Technology use in business has always come at a price, and as various influences continue to change how users interact with devices, applications and systems, business owners and IT managers will continue to face difficult choices between balancing security of information resources and providing a productivity-enhancing user experience.   Too many security barriers result in avoidance of security protocols, slow or immobile company computers result in users working on their own machines and portables, and restricting access for mobile users results in “shadow IT” implementations of mobile sync and other data access approaches.

Yet “shadow IT” tends to be the norm with many small businesses, where there are often fewer barriers to implementing solutions which address individual user issues or problems.  Lacking the resources or understanding to develop a strong plan for managing information systems and technology within the business, small business owners often consider the computer systems and computerized data to be tools to get jobs done rather than strategically valuable assets to be strictly controlled and protected.  These business owners are not recognizing the ever-increasing need to not simply secure business information, but to establish processes and rules which will govern how users and devices access and interact with the information and systems.

Enterprise IT departments have often viewed their small business counterparts (customers, suppliers, etc.) as potential points of vulnerability, an attitude which was once considered to be centered not on real assessments of the risk but more in terms of ego, level of sophistication, and hierarchy in the food chain.  In today’s world of real risk introduced by myriad technological and human elements in every link in the supply chain, enterprise IT conclusions regarding the risk potential of doing business with anyone – including small businesses – may not be entirely unfounded.  Whether it be commentary and information distributed by individuals via social media or malware or corruption introduced inadvertently (or not) via computerized interaction, there is the possibility of risk introduced with every system, person and process involved.  Enterprise to enterprise, these issues may be more often recognized and remediated; where the SMB is involved, not always so much.

This is a brave new world of computing, and there is truth in that even the smallest of businesses can “compete with the big guys” when the right mixture of technology and process is applied – for good or bad.  Technology enables businesses to be more productive, get more done with fewer resources and perform at higher levels. IT Governance in small business is no longer an optional area of focus, addressed only during infrequent discussions with the local contract IT guy when he comes in to defrag the hard drive on a slow computer.  Establishing the proper processes and controls to wrap around IT use in the business has become an imperative; a necessarily specific and considerate approach to how information technology is used within the business, who uses it, and what IT is composed of.

Just about every business, and most individuals, are connected in some manner via some type of network, representing a dramatic and dynamic change to the traditional composition of business IT and the landscape of vulnerabilities which threaten it.  The increased connectedness, capability and complexity of systems and networks requires a greater focus on overall IT governance – exercising authority and controls – as the impact (just like the information) can easily and unintentionally reach far beyond the boundaries of the individual business.

jmbunnyfeetMake Sense?

J

“People are nothing more than another operating system”, says Lance Spitzner, training director for the Securing The Human Program at SANS Institute.  “Computers store, process and transfer information, and people store, process and transfer information,”  How Hackers Fool Your Employees

Accounting for Point of Sale

Accounting for Point of Sale

There are a lot of solutions available to help retail businesses get business done.  From touch screen technology to mobile credit card and payment processing, retailers have many choices when it comes to selecting the right technology for the establishment.  But even the best point of sale system can lack the critical element that makes it truly valuable for the business.  This critical element is integration to a trusted accounting and finance solution.  While the POS system may include a level of basic accounting functionality, the reality is that a dedicated financial application will perform better in the long run.

Just as specialized line of business applications are used to handle operational functions, the financial application should be considered to be the “line of business” solution for the accounting and finance department (even if it is a department of one). This system not only services essential processes like receivables management, bill payments and bank account reconciliation, it serves as the basis for payroll, financial, tax, performance and other reporting. Further, the financial systems are often the first and primary source of analytical data, illuminating KPIs and cash flows and ultimately the business value.

The point of sale application generally handles the selling of and payment processing for goods and services sold by the business.  Whether it is composed of registers and terminals connected to a host system, PCs running POS software, or mobile phones and tablets running mobile payment processing apps like Square or GoPayment, point of sale addresses the retailers need to capture and record sales and payment information, sometimes customer information, and often inventory information.

The data from the POS solution must make it to accounting in some manner, yet point of sale applications are too-often approached as a standalone business requirement, somehow disconnected from other aspects of the business including the back-office.  Sales and items may be recorded in the POS system, yet only summary sales data ends up being re-keyed into the accounting system.  Centralized inventory management is all but nonexistent in these cases, and gross sales total are often recorded rather than individual transactions and receipts being transmitted to the accounting system.  The process of re-keying information from the POS to accounting systems is not only an efficiency-killer, it is also introduces a great potential for errors.  When the business elects to conserve on data entry and post only summary information to the accounting system, valuable detailed sales and transaction data may be lost.

The right approach to bringing point of sale together with accounting is to automate the process of integrating POS data with accounting on a regular basis – with AUTOMATION being the key.  Rather than establishing a process that requires manual entry of information from either system, a data integration solution is the best approach, with an import/export solution running second. The point is the elimination of manual re-entry of information.

There are numerous tools available that can take formatted POS data and import it into products like QuickBooks, for example, where it can be properly accounted for.  While QuickBooks Point of Sale integrates with QuickBooks desktop products, other POS solutions can also connect with QuickBooks if the right integration tool is selected, and there are quite a few available.  Check with the POS vendor and ask about a direct integration with QuickBooks desktop or whatever financial system you use. If there isn’t a packaged integration solution available, then check out products like Transaction Pro Importer, which can automate a variety of data import processes and ease the burdens moving external data into QuickBooks.pointofsale

The other factor in getting point of sale data to accounting is actually getting it there… transporting the data from the POS location to where the accounting system lives.  In many situations it is not desirable to keep the accounting system on the same computers as the point of sale systems, and in some cases it isn’t even possible.  But there is generally a way to get the information in a form that makes it possible to transmit it in some manner.  Among the most popular approaches to solving the “getting the POS data from here to there” problem is to use a data sync solution like Dropbox.

If the point of sale data can be exported or output to a file on a PC hard drive, then it may be able to be stored in a Dropbox folder on that PC.  At the home office where the accounting system resides, the operator would access the sync’d files from the local PC Dropbox folder and import the data to QuickBooks.   For QuickBooks Point of Sale there is an option to create a “mailbag” of sorts from the POS data of a remote store, which QuickBooks POS at the home office would pick up from the Dropbox folder and push to the QuickBooks financial application.

For businesses using POS systems like Micros or POSitouch and others, there is likely a service or application that will produce the POS data for import to QuickBooks or other financial system, pulling POS data files placed in the Dropbox folders by the POS app or performing the function as a web service or SaaS integration.

While I am a big fan of application hosting services and running QuickBooks desktop editions in the cloud, I’m also a realist and recognize that many POS solutions either can’t or shouldn’t be hosted.  There are situations where a hosted point-of-sale makes a lot of sense, and then there are cases where no bandwidth or proprietary hardware-based solutions make hosting not even an option. That doesn’t mean that the financial systems shouldn’t be hosted, though, and there are numerous ways to get the sync’d POS exports to the hosted QuickBooks environment, for example.

The key for retailers is to make sure there is a solid process for getting detailed and accurate POS information into the accounting system on a regular basis.  Manual entry is never the best answer.  With all of the technology and tools available, manually re-entering sales information is a waste of time and is likely to produce errors.  The better answer is to use an approach that automates the regular collection of point-of-sale data from all sources, delivering the data in a regular and consistent manner to accounting, and providing the basis for end-to-end automation supporting the integration of the point of sale system data with the rest of the business accounting.

jmbunnyfeetMake Sense?

J

Good Habits for Healthy QuickBooks

Keeping_QuickBooks_HealthyUsing a QuickBooks desktop product is pretty simple – you install it and then you run it.  For many users, it’s just that easy and uncomplicated because they don’t need 3rd party integrated software, they don’t sync their files to other computers or services or try to share their QuickBooks data, and they remember to exit QuickBooks and back their files up each and every time they use them.  On the other hand, many QuickBooks users experience quite a lot of frustration with the product – frustration which may often be the result of a poor practice when using the software.  QuickBooks has been engineered over many years to be as simple to use as possible, but at the same time has grown to be a product with lots of features, add-ons and extensions.  Users have also found ways to make QuickBooks do things it wasn’t really designed to do, this truth being one of the good things and the bad things about the product.  When it works, it works great.  When it doesn’t work, it’s beyond frustrating.  It is a shame that a lot of the problems users have with solution may be rooted in the habits and behaviors of the QuickBooks users themselves.

Bad software use habits will cause problems whether the software is installed on the user PC or whether it’s being managed by a hosting service provider.  Certainly there are some issues that hosts may mitigate, but the following is a list of good habits for keeping the QuickBooks software and data healthy and working that should be standard operating procedure for any QuickBooks user, whether QuickBooks is being hosted or not.

Keep the company file in good condition.

I cannot stress enough the importance of keeping the file in good condition.  What’s the accounting and financial data worth, after all?  A little time spent taking care of the file can save on a lot of time and headaches trying to reinvent the information. A QuickBooks company file is really a database, and is a rather complicated framework for keeping track of all sorts of related information.  Anyone who has used QuickBooks desktop products for a while understands that the data file can get screwed up for a variety of reasons, and it is no fun.  Yet QuickBooks has utilities to verify and rebuild data files, so it makes sense to periodically use them to check for problems.  Like a check-up with the doctor, these utilities can help diagnose issues with the data file before they become really big issues.  Another good practice is to back up the company file to a “portable” once in a while, and to then restore it for use.  This process can not only validate the integrity of the file, it also helps condense and “condition” the file.  Particularly when using a hosting service, but also when just running local on the PC, conditioning the data file once in a while can help prevent data corruption and/or loss (of data, time, productivity, revenue).

Close the company file and exit QuickBooks once in a while, would ya?

Users who leave their computers on all the time are missing out on the fun of letting their machines reset and do a POST (power on self-test), which means the machine or operating system could have an issue and the user wouldn’t recognize it until the machine was powered off and then restarted.  For this same reason, programs and their data files should be closed when not being used – so they can run through their own startup and validation routines before you use them.  Also, leaving the program open means it is active on the computer, and leaving the data file open means that it’s available (read=vulnerable).  A random bypasser accessing the computer, a program crash, a machine crash… loss of power or a kitten running over the keyboard could all result in catastrophic damage to the application and/or data.  It’s just better for all involved if the files and programs are closed when not being used.  Maybe use a screensaver with a password, too.

Don’t try to use QuickBooks with a VPN (virtual private network) connection.

Just because a user can connect their remote PC to the office network doesn’t mean the PC will work like it’s in the office.  In the office, it’s a Local Area Network, and the speed is fine enough to allow multiple computers to share a QuickBooks company file in multi-user mode.  When there is a remote PC connected via a VPN, it’s usually a Wide Area Network connection, meaning that the network has been extended to include the remote computer, but that network connection IS NOT fast enough to allow the remote user to open QuickBooks along with others in the network.  QuickBooks multi-user access only works on a local network (where local means the machines are all “local” to each other – on the same LAN).  When QuickBooks is hosted by a service provider, the QuickBooks stations and the data files are all located inside the host’s network, making it all LAN stuff.  The only remote part of it is sending the input and output (display, printing, keyboard and mouse) information “over the wire”.  This is why a hosting model works when the app and data are hosted, but doesn’t work when only the data file is hosted.

Use Automatic Update, not Manual (but DO update).

Features change, new technologies must be supported, and user expectations adjust based on a wide variety of influences.  What this means is that software products will necessarily experience change over time and users will be expected to update them.  The first release of any new product is rarely flawless.  It’s during that first introduction to a volume of users where many issues are found, making the v1 release of a software product something many people try to avoid. Yet there are still lots of folks who just can’t wait to have the newest thing, even when it comes to something like software patches.  Regardless of how much they may put at risk, these folks want each and every patch and update as soon as it is available somewhere.  These are the users who end up debugging the software for the rest of us, so I guess we should thank them.

For most users, however, it makes sense to wait until the software has been out for a bit and those initial issues identified and corrected, perhaps bypassing v1 and going straight to v2.  If the product will allow, that is.  QuickBooks has this great (or annoying, depends on how you look at it) feature that can tell users when there is an update available.  This “automatic update” feature checks with Intuit to see if there are updates available for the product, and then tells the user they can download and install them.  Generally, Intuit pushes these updates out only when they’ve been debugged and are deemed ready for volumes of users.  If people want to get an update before Intuit pushes it out, they may be able to obtain it for manual installation.  This is not the recommended method of handling QuickBooks updates; for most users, waiting until the product tells them it’s time to update is best.

Make sense?

J

4 Rules of Thumb for Considering Cloud Applications in Business

With all the talk of cloud computing and Software-as-a-Service models, businesses are increasingly questioning their continued use of on-premises and “traditional” software implementations. Having heard that cloud applications are cheaper and better than locally installed solutions, some small business owners and IT managers are actively seeking alternatives to their current software selections. In too many cases, however, these business owners or IT managers aren’t looking at the longer term impacts of their decisions, and may be adopting cloud software solutions simply because it seems to be the way things are going these days.

The cloud is simply a term being applied to a new way of looking at information technology – how businesses buy it, how they use it, and what they expect from it. Even as technology gets more complicated, users are demanding greater ease-of-use and lower costs. The response to these conditions is the cloud: addressing basic and common requirements and delivering the solution for a low-cost to many users. While the approach meets the simplicity and affordability elements, it may or may not fully address all the functional, compliance or sustainability needs of the business.

4-rules-of-thumbOne size never fits all, and this is as true with cloud computing as it is with bathing suits. For the business owner or IT manager considering adoption of cloud-based applications for the business, keep in mind these 4 Rules of Thumb so that the hype and excitement doesn’t cloud your judgment.

Rule 1: Software is software, and it is installed somewhere. Just because an application is accessed using a browser (which is software) doesn’t mean the product isn’t installed somewhere. When it’s a SaaS solution, the product is simply installed and running on the provider’s servers rather than your own computers.  Software can fail even when it isn’t on your computer, so it should be expected that failure could happen with SaaS solutions.  The difference is that a failure of an app on one machine isn’t news; failure of an app that lots of people are using at the same time is news.

Rule 2: Software that talks to other software means there is integration between the two. Whether the products are installed on the PC or whether they run from different providers’ systems, they still have to be able to communicate together at some common level. The Windows platform used to provide a “common” standard for integration of Windows applications. When applications move from the desktop platform to the web, many of the common integration approaches no longer work and new methods must be developed.  Just because a solution integrates with the desktop edition of a product does not mean it will automatically integrate with a web or SaaS edition of the product (QuickBooks exemplifies this).

Rule 3: Software still requires hardware and other resources. When cloud-based solutions are implemented, the cost of the server and storage facilities (along with other elements) may be included in the subscription price. The efficiency and scale economies developed by the provider will ultimately determine their profitability, but it is generally the case that centralization of resources, management and administration can significantly reduce the cost of operations. With most cloud solutions, it is the assumption of scale (leveraging a single asset base to many subscribing customers) which makes things more affordable than deploying similar capabilities individually for each customer. Consider also that any deployment of cloud software solutions still means that businesses must retain their local networks and devices. While PCs, laptops and tablets may not be running business applications, they are still computing devices which may need to connect to networks, have virus protection, have remote access or connection software installed on them, and any number of other things. In short, moving to the cloud does not remove the requirement to have and maintain user devices, printers and LANs.  And really, don’t most people still want Office applications on their devices, even if they also have remote access to such applications?  Office for iPad is somewhat of a tell in that respect; kind of proves the point.

Rule 4: Not all data is stored in the same manner. This is as true on a PC or LAN as it is in the cloud. However, cloud solutions can introduce quite a wrinkle when it comes to keeping copies of business data over time. With PCs and local networks, a business would back up their data in any variety of ways, preserving the files and formats for possible later use. As long as there was software available to read and open the files, the backed up data would be usable. Simply due to the popularity of some data formats, there might also be tools or utilities available to read the data even if the original application was lost. The wrinkle introduced with cloud solutions is not necessarily that the format of the data is strange – it is likely that most cloud-based business applications use fairly proven and recognizable database technology. The difficulty is that the actual database file(s) containing a company’s unique data may or may not be separate from other company data. If it is separate (single-tenant database), it is unlikely that the database as structured is portable. The fact is, most web-based or cloud solutions will allow users to export data from the database, but cannot provide actual structured data files ready for use with another application, lacking logical data or table relationships. Some solutions suggest that simple list exports are sufficient, and others may say they have data conversion capabilities, but the reality is that data existing in a cloud application is not very portable. Business intelligence is a terrible thing to waste, so it is really important to be able to take all the data with you (in a meaningful way, not as a bunch of disparate lists).

Cloud computing covers a really broad spectrum of technologies and delivery models, and most of the above is more about SaaS applications rather than actual cloud platforms. The platforms are where the applications live – server and network environments.  This is where hosting companies do their work, as the things they host live on the platforms.

Businesses electing to add mobility, management, fault tolerance and other capabilities to their systems should explore the benefits of application hosting and cloud platforms, and not immediately look to SaaS and cloud application alternatives to their existing software solutions. By deploying their systems in a managed hosting environment, businesses can often keep using their existing core software products, integrations, and data archiving methods while gaining the best benefits of “cloud”.

Joanie Mann Bunny FeetMake Sense?
J

 

Why #Accountants Should Implement #Cloud Services | QuickBooks and Beyond

Why Accountants Should Implement Cloud Services

Most professional accounting service providers, accounting pros included, are recognizing that customers are increasingly demanding lower costs for service but want more flexible methods for obtaining the service. Where the business value of the service provided used to be enough, providers are now expected to deliver their services how and when clients want them delivered.

Evidence of the mobile and social impacts of technology is visible everywhere, and no business is immune to the requirement to adapt or perish. Rather than viewing the shift in technology application and use as a threat to previous well-rehearsed process models, wise practitioners are finding opportunity to change things around a bit, facilitating workflow and process improvements and creating new opportunities where they didn’t previously exist.

Breaking Down Time and Distance Barriers

via Why Accountants Should Implement Cloud Services | QuickBooks and Beyond.

The Business Cloud: Hype versus Reality

The Business Cloud: Hype versus Reality

There is no doubt that cloud and mobile computing models are driving technology adoption as well as changing the landscape of how consumers and businesses purchase and use IT.  Accompanying any great shift – which in this case is fueled not simply by cloud technologies but by social computing – are the purveyors of propaganda and hype.  Cloud computing and social media won’t make you popular, is not always safe or free, and it doesn’t whiten your teeth. What it can do is help businesses increase agility, collect and use information better and reduce the cost of change. There are many benefits to be achieved with cloud computing models, yet many providers continue to play on the hype rather taking the more difficult road of communicating how their solution actually solves real business problems.

Gartner research tracks this type of activity, producing reports offering assessments of the “maturity, business benefit and future direction of over 1,900 technologies”.  In the Gartner 2011 Hype Cycle Special Report, entries were grouped into 76 different “Hype Cycles”, revealing the similar patterns of “over-enthusiasm, disillusionment, and eventual realism” that comes with every new technology or innovation.  Hoping to provide guidance business IT decision makers, the report intends to inform businesses about when they should consider adopting technologies or IT models in order maximize the value of the approach.

Yet the market is bursting with definitions for “cloud computing”, and services providers offer their wares with varying levels of service and capability.  It’s really difficult to compare one private cloud solution to another, as they are all seemingly offering the same value proposition described in the same language – and none of it really describing what the solution is, how the business takes the greatest advantage of it, and what disruption can be expected along the way. Layer on top of that confusion a big heap of expectation, and the belief that cloud computing technologies are somehow different from “real” on-premise systems in that they are not subject to the same potential for breakage, failure, or unexpected cost.

elastic-2

For example, even though Amazon may use the term “elastic”, cloud computing does not automatically create a stretchy and eternally-dynamic resource that can grow without end.   There are still limitations and costs associated with growth.

There is also a great deal of hype around applications and their performance in cloud environments.  When a piece of software is poorly designed and crashes frequently on a local computer or network, it is just as likely that the application will perform poorly in the cloud. It’s simply a reality of software that even great products that are designed to run exactly the way they are being run don’t have a guarantee that nothing will ever go wrong. With cloud computing models, however, there may be a service provider working in the background to manage the systems and keep things running.  You simply might not notice the failures and hiccups as much, but they are still there.

And not all cloud services mean everyone is sharing servers and infrastructure.  While the term cloud generally applies to multiple scaled systems, it doesn’t mean that everyone shares everything and benefits from tremendous levels of redundancy and fault tolerance. In most cases, a solution described as a “private” cloud means that the service has been customized for the unique needs of the organization, and that there are resources of certain types allocated exclusively to the use of that customer. On the other hand, a private cloud may mean that the system elements are all contained within the business infrastructure, providing “cloud” type of services but being delivered from company resources.  There are a wide variety of ways to describe these configurations and approaches, and quite a bit of inconsistency in use of terminology.

The best thing for a business owner to do now is to just ignore the term “cloud” and simply consider how the business might leverage resources from service providers to gain more IT capability at reduced costs, and how outsourcing certain technology needs allows a greater focus on internal innovation and improvement.  Centralized management, improved security, disaster recovery, and increased mobility are all benefits to be realized with the right business cloud implementation.  Just because it is to be an outsourced solution does not mean that the business organization should not still architect and understand the solution they will depend on.  If this level of participation and understanding is not in place, the solution is unlikely to deliver the resulting benefits expected and hoped for.

Outsourced IT service, remote access and server-based computing aren’t new concepts.  It still requires using common sense and reasoning when considering any change in business technology and the innovative application of IT in a business – this cannot be outsourced.  When it comes to cloud computing… to put it bluntly, just avoid the hype and stay away from unrealistic marketing and sales messaging.  If it sounds too good to be true… it probably is.  Technology hasn’t come that far.

Joanie Mann Bunny FeetMake Sense?

J