Online Accounting Technologies – Page 23

June 19, 2013

HIPAA Privacy and Security and the Cloud

Is your cloud solution or hosting service HIPAA compliant? This is among the most frequently asked questions from professionals shopping for cloud hosting service. Unfortunately, it is also among the questions most frequently answered with ambiguity, or with naiveté. The problem is that many businesses dealing with HIPAA compliance responsibilities as it relates to protection and security of personal health information may not fully understand their responsibilities as they extend to outsource IT and other service providers. In the case of HIPAA compliance, many providers suggest their compliance without truly understanding what it means, and are introducing significant risk to their business and subscribing customers because of it. With recent changes in rules relating to protection and control of personal health information, it is not just the health care provider, the health plan, 3^rd party administrator or others that process health insurance claim information which must agree to provide adequate controls – the requirement may fully extend to business associates of these entities… possibly including their cloud service or hosting solution providers.

Some of the largest breaches reported to HHS have involved business associates. Penalties are increased for noncompliance based on the level of negligence with a maximum penalty of $1.5 million per violation. The changes also strengthen the Health Information Technology for Economic and Clinical Health (HITECH) Breach Notification requirements by clarifying when breaches of unsecured health information must be reported to HHS. http://www.hhs.gov/news/press/2013pres/01/20130117b.html

HIPAA guidelines and rules exist to protect and secure personal health information, a requirement growing in importance with advancements in technology, electronic health records, e-billing solutions, and cloud computing adoption. Where the regulations were once focused on the entity directly involved in generating or processing the information, the view is now extended not only to 3^rd party administrators, but also to the technology solutions and providers involved. When a “covered entity” (an entity with a responsibility to protect and secure personal health information [PHI]) makes a decision to move this information to the cloud, a number of important and complicated issues must be addressed in the agreements with the service or solution provider. These issues include security and privacy of information (including providing individuals the right to access and request changes to the stored information), tools which may be provided to allow the customer additional security protection, encryption of data at rest and in transmission (and who holds the keys), data location, return of data, disaster recovery, and service levels.

Cloud provider contracts and business associate agreements with cloud providers are not one-size-fits-all and should be negotiated carefully to protect PHI in a manner that accurately reflects the capabilities of the parties http://www.americanbar.org/content/newsletter/groups/labor_law/ebc_newsletter/12_winter_ebc_news/ebc12winter_cloud.html

The provider delivering cloud hosting services to the business may now be considered to be a “business associate” under HIPAA, meaning that the responsibilities of the Customer (the “covered entity”) also extend to their service provider. For any business operating under a HIPAA compliance requirement, moving to the cloud must necessarily involve a detailed discussion and set of agreements that spell out the “business associate” relationship as well as the details of the service delivery and accepted performance levels.

Joanie Mann Bunny Feet Make Sense?

June 17, 2013April 6, 2017

QuickBooks In-House Hosting Services for Accountants

QuickBooks Hosting Services for IT-Capable Accountants

DIY-SelfHosting Small businesses in large numbers are looking to the cloud as a platform to deliver solutions for the problems of escalating IT costs, mobility, and remote access to business data. The cloud is also becoming the recommended platform for the delivery of services from accounting and bookkeeping professionals, as the benefits of remote data access and real-time collaboration nicely address the requirement for accounting pros to exchange and share information with their business clients. One of the popular “cloud” hosting solutions addressing a collaborative accounting model is a hosted application approach to using Intuit QuickBooks desktop products. While accounting professionals may be aware that QuickBooks can be hosted by 3rd party providers, many firms are not aware of what is referred to as the “self-host” model, which is a QuickBooks hosting model for accounting firms with some in-house technical capability.

For small businesses and many accounting service providers, working with a 3rd party hosting provider makes a lot of sense, as the host has the infrastructure and the support organization necessary to service large-scale hosted customer requirements.

On the other hand, there are a lot of accounting and bookkeeping firms which have skilled in-house IT personnel who are more than capable of creating a hosting environment to serve not only their internal needs, but also to meet basic requirements of the QuickBooks-using clients they work with. It makes sense to explore the possibilities of implementing a “self-hosting” model for client access to QuickBooks, overcoming the cost and other barriers involved with 3rd party hosting services.

When an accounting firm works with a number of clients with QuickBooks desktop edition files, the firm has to install and manage not only their own software products, but also the relevant QuickBooks software products in use by the various clients (must have the right QB program in order to open the QB data file). This often puts an undue burden on the internal IT systems of the practice which has its own internal-use software and systems to support. With an internal hosting approach, the firm can provide standardized/centralized application hosting services to their clients, building their own “economy of scale” on the platform and reducing the IT management while achieving all the real-time and remote access benefits of an outsourced hosted model. The firm does not experience a retail cost for a hosting solution, and the cost to host the client is generally offset through the efficiency gained at the firm level through direct access to client data and applications.

The technical model for delivering hosting services to a relatively small client base is not overly complicated. Commercial service providers have complex architectures because they must serve a large and diverse client base, and they never really know what sort of devices (computers and printers) or connectivity the customer may have. Commercial providers have to be prepared to deal with any and all situations, where a “self-host” firm needs only to concern themselves with supporting their particular client users and use cases. Additionally, when the solution is offered as part of the accounting or bookkeeping service, the support requirements of the customer tend to be focused during mutual working hours, as opposed to the 24×7 support demanded of the commercial host.

As accountants and bookkeepers search for solutions to improve efficiency, increase profitability and differentiate services, it makes sense for those serving QuickBooks desktop clients and having an in-house IT capability to explore becoming a QuickBooks self-host. It is one possible way to eliminate cost as a barrier to working closer with QuickBooks desktop clients while providing the mobility and collaboration businesses need.

Make Sense?

Joanie Mann Bunny Feet J

June 11, 2013November 3, 2017

A Holistic Approach to Cloud IT

holistic: a. Emphasizing the importance of the whole and the interdependence of its parts.

The Internet and cloud computing solutions can help businesses create an environment which allows team members and clients to work together more efficiently; where information can be generated once and used in a variety of ways by different users. With this new capability to share documents and files in real-time, many businesses are finding that they are generating more electronic information today than ever before – and they’re having a hard time keeping these information assets organized. With paper documents being digitized to allow for electronic distribution, OCR, and intelligent connecting to transaction data – lots of stored data is being produced and stored in a variety of places.

There are many technology models available, so there are a lot of options for businesses today – options which address the fundamental requirements to convert, store, secure, and distribute the various data types within the enterprise. When a business elects to use a variety of cloud solutions or providers to address a number of business problems, how does that enterprise wrap its arms around the content which represents, in all actuality, the sum of business intelligence in the enterprise? Keeping tabs on the business data is critical, but tracking all the data when it is stored with a variety of providers may be very difficult.

Example: If your business uses an online CRM such as Salesforce.com, runs QuickBooks on your local PC, and uses Gmail for email service… exactly where does your business data live? With Salesforce? On your local PC? At Google? In all 3 places?

Containment of distributed data isn’t the only issue facing businesses today. Longevity and long-term access to data is a concern, as well. Solutions and providers that exist today may not exist tomorrow. If you have data invested in a solution with a short life span (and you probably won’t know this is the case until it’s too late), you may orphan your data and not be able to access it later. And, if you can get your data from the provider, is it in a useful form or did you lose functionality when you lost the solution?

Example: Intuit once introduced a paperclip (attached documents service) in QuickBooks, and offered the attached document feature at no charge. The “free” service from Intuit encouraged a lot of users to migrate from other QuickBooks-connected document management solutions. Then… Intuit announced that the attached documents service would no longer be free. Users with the service could still get to their documents via a web portal, but not from within QuickBooks, and certainly not as attachments to transactions or other records. Then the attached documents feature was once-again changed, allowing only storage to local PCs rather than on Intuit’s servers. Then, it went away entirely.

Another issue facing businesses operating in the cloud is one of vendor lock-in (or lock-out), and being able to address the total business requirement. Point solutions and vendor-specific solutions may address certain business problems, but generally aren’t able to handle all of the needs of a given business. If your online solution doesn’t address the needs of the entire business, you risk increasing production costs and reducing productivity through duplication of data entry and other activities.

Example: An accounting firm with an insurance division uses Thomson Reuters Virtual Office service, which delivers certain accounting applications along with Microsoft Office on a remote desktop type of connection. Unfortunately for the firm, the users operating in the insurance division use applications that aren’t supported or available via the Virtual Office solution. So, certain users have completely disconnected services – a remote desktop serving up their Office apps, and a separate browser-based solution – neither of which integrate or work together. The complexity and confusion caused by this situation has done little more than increase the burden of duplicate data entry, recreation of documents, and constant download-save-upload activities.

In each of these cases, a “holistic” approach to cloud IT services might have produced better results than by looking at each application or functional “solution” individually.

As an example, consider that a business with in-office and mobile employees needs to use accounting, office productivity, contact management, documents storage, and several browser-based solutions in order to provide the functionality and operational support necessary. While many of these solutions are individually available online, the business opts to work with a single outsourced IT provider to create their own “private cloud” environment.

The solution includes remote/virtual desktops, hosted accounting applications, hosted Office applications, hosted browser (to allow browser and Internet-based apps to integrate with Office and other apps on the remote desktop), hosted CRM, and hosted document management… all applications that the business selects and might even have been using for years are included.

All applications are delivered on the remote desktop environment, providing users with the ability to open documents instantly, save and share files seamlessly, and participate in a central company-wide document store.

All applications are licensed to the business, so they have the flexibility of returning to local IT operations simply by implementing their own software in their own network and taking the data off the host.

Because all of the business data resides on this single hosting platform, the business is able to not only keep control of all information assets, but is also able to back up and protect (preserve) that data in its entirety.

Now doesn’t that make sense?

Learn more…

June 5, 2013April 28, 2017

Sustainability and the Humanization of Work

Few problems in business are truly solved simply by throwing more money and resources at them. Certainly, having the people, tools and supplies to get the work done well is a business requirement, and many organizations take a “building out” approach to addressing growing workloads and customer demand. On the other hand, there are business owners who recognize that things can always be accomplished better and more efficiently, and that improvements in these areas can make the difference between ending up with an overburdened organization with more mass than agility, or a lean organization with the ability to sustain itself while continuously adjusting to meet changing internal and external challenges.

It is said that the only constant is change, and businesses must find a way to effectively and cost-efficiently meet changing demands and conditions in order to survive. What frustrates many business owners is that change is generally disruptive to the business, representing a significant challenge when it comes to the re-development of internal processes and procedures. At issue is the understanding that proven, structured and repeatable processes help to improve efficiency, yet changing conditions often require changes to these processes. In many cases, businesses find that the requirement to structure and document activities is work that must be re-done in the event of broad changes. Too often, the work falls by the wayside because the minute it is completed, some change comes along and renders it obsolete. It is somewhat like the child who questions making their bed each day, as they’re just going to sleep in it again and make it messy.

There may be a solution, and a lesson to be learned, in the “kaizen” approach to change and improvement. Wikipedia’s entry on Kaizen identifies the meaning of the Japanese-Kanji word as simply “good change”. Similar to the English word “improvement”, kaizen does not refer specifically to any single or ongoing change. Rather, it has come to describe an approach to business which recognizes the potential for improvement – improvement in work product, work conditions, worker satisfaction, and worker performance – at all levels throughout the enterprise. Further, kaizen does not describe change as being broad-ranging or particularly intrusive. Beneficial (good) change may come at any level and may be identified by almost any source.

Kaizen is a daily process, the purpose of which goes beyond simple productivity improvement. It is also a process that, when done correctly, humanizes the workplace, eliminates overly hard work (“muri”), and teaches people how to perform experiments on their work using the scientific method and how to learn to spot and eliminate waste in business processes. http://en.wikipedia.org/wiki/Kaizen

The ultimate business goals are, of course, improved productivity, product quality and profitability. A “Kaizen” approach to business recognizes that these goals are often met through gaining the participation of the entire organization. Whether approached as individual effort, small or large group, or via suggestion system, the purpose is to nurture the company’s human resource and help focus it towards making improvements in work environment and activities which lead to improved productivity. After all, the most valuable asset a business has is its people. It is logical to apply this individual and collective intelligence and source of business knowledge towards making the company better – and a better place to work.

Make sense?

June 3, 2013

Client Solutions, not just Professional Services

Accounting Professionals serving a small business client base are struggling to find ways to demonstrate the value of the services they provide, yet many firms remain focused exclusively on their own processes and improving profitability therein rather than looking “outside the box” to see how they might involve the client in the discovery. The obvious element which these firms are not addressing is the client user, and how a direct participation by the client becomes the foundation for internal process improvement. After all, a lot of what accounting professionals are battling against is perceived value. If the client were to be a more direct participant, the value of the work and the tools which support getting it done could provide a more tangible or visible aspect and increase the overall value perception of the client.

It is easy to say “get the client more involved”, but actually doing it can be the real challenge. Professionals are recognizing this reality as they attempt to engage client users in online portals for document exchange and by providing application functionality which is supportive of the accountants’ processes. While some professional firms are experiencing success with this approach, many other firms are not. There are likely a variety of reasons why some firms have more success than others in getting clients to work with their online tools, but I believe there are two key elements which impact success: accountant-centric focus, and provider lock-in. Whether these elements work to the firms’ advantage or not depends solely upon the specifics of the service model and client market being served.

Accountant-centric focus

Most accounting professionals recognize that paperless approaches to working with client information and documents makes a lot more sense than working with the actual paper. Particularly with the innovations in image capture, OCR and zero-entry solutions, it is logical to try to get as much of the required information transformed into useful digital data as possible. Data entry time is reduced, accuracy is improved, and the resultant information is better and more useful and may be processed more efficiently… for the accounting professional. For the client, on the other hand, it’s just another way to get information to the accountant (who is always wanting more information). The value of the deliverable – the reconciled bank account, financial report, tax return or whatever – isn’t increased. The solution often offered to the client is a solution intended to solve not the client problems, but the accountant’s. For the client, it is difficult to see this as a “solution” to any evident problem they face.

Provider lock-in

Business software customers are often commenting about how the solutions they use don’t allow easy transition to alternative products, or add-ons are only available from developer-prescribed sources. Vendor lock-in is a consideration and may be a barrier to doing business, because business owners want to know that they have the ability to change as business requirements change… whether it means changing software and systems, or whether it means changing professional service providers. As more professional service providers attempt to engage their clients in technology-based approaches to doing business, clients are recognizing that these approaches may come with “strings attached”, limiting their future choices. While it is important for the professional services firm to protect its work product, it is also important to consider the client’s position. Part of every business relationship is trust, and that trust should not be one-sided. Just as the professional trusts that the client will work with them in a legitimate manner, so does the client trust that their professional will not hold their information hostage if they elect to make a change or engage with other providers in the future. Additionally, does the system provided by the accounting firm allow the client to collaborate with their own team members or other service providers, or does it address only the interactions between the accounting pro and the client? This also represents a barrier to participation, as any given client business likely interacts with a variety of providers – many of whom are also asking that owner to implement solutions which improve their ability to do a form of e-business together.

As accounting service providers look to technology to facilitate closer and more efficient working arrangements with clients, they would do well to also consider how that technology is positioned to benefit the client as well as the professional practice. Delivering a solution which provides clients with the capability to control information access, which allows collaboration with their various service providers, and which facilitates a lean process approach for all involved could be the right answer to the problem. Perhaps this becomes the most important factor – client enablement – and focusing on solutions which address the clients’ information management and processing requirements as well as those of the firm.

Make Sense?

May 24, 2013May 23, 2013

Accounting and Business Technologies | Joanie Mann: Salvaging Business Intelligence

The issue is that you are either a customer or you are not, meaning that companies can’t keep their old SaaS solutions around just for historic data unless they wish to continue the subscription with the SaaS application. This is of particular concern with finance and accounting applications, as they are the core of the business intelligence, and the source for tax data, compliance, etc. Keeping the financial data for long-term access is a requirement for most businesses.

via Accounting and Business Technologies | Joanie Mann: Salvaging Business Intelligence.