Posts

Posted on

Accounting Professionals, Software as Service, and DIY

Joanie Mann Bunny Feet

The question begs to be asked “how did we get here?” (with “here” being the current state of information technology and the accounting industry). There is confusion in the market; there is still significant debate as to the underlying value of Internet technologies and online application services, and the “managed enterprise approach” has yet to return the benefit and cost-efficiency that is expected.

The accounting industry is experiencing continued change, and understanding the progression of events and technology developments can provide significant insight into where the industry is today and where it will likely be tomorrow. Most professional accounting firms recognize the need to implement technology and solutions that will help the firm and its clients compete in today’s market. Understanding the options available and imperatives that drive the need is key to making the right choices

Technology to manage general business and financial processes has evolved tremendously in the past 20 years, and history clearly reveals that those who have successfully adopted such technologies have done so in stages. Bridge technologies and services (which I fondly refer to as “tweeners”, like cloud hosting of legacy applications) provide a means for safe and low-risk adoption of online working models and managed IT services.

Application hosting solutions have achieved a high level of acceptance in the market, and these are the services that have assisted in garnering online users for the purely Web-based (SaaS and cloud) applications. Providers delivering their “legacy” applications using terminal servers, Quest, Citrix and similar technologies offer the full capability of the Windows application along with the rich Windows interface, as well as the benefits of ASP service and Internet accessibility similar to the Web- app (e.g., the “software as a service” model). This familiarity in functionality and presentation has made adoption of hosted deliveries of these applications a harmless and often seamless transition from localized IT models.

Once a business has adjusted to working online and outsourcing the management of the general IT service, taking the step towards a “true” SaaS solution is much less of a step.

However, trends in the software industry indicate that the concept of “software as a service” has been taken several steps beyond simply providing online access to applications, and are offering outsourced support and finished product deliverables rather than just the software application. For example – an accounting professional may obtain a “finished client tax return” rather than simply purchasing the tax preparation software.

For many emerging Web-based applications, this is the positioning and model which is selected to bolster adoption of the solution.  There has been a great deal of success in offering business users access to a solution, and then providing the actual business service behind it as users find it easier and more efficient than doing the work themselves. This activity has focused on the direct customer and consuming market, where business applications are not sold separately, but as a function of getting the business process facilitated. CRM and helpdesk services are frequently offered this way, as are HR administration and payroll services. The technology has matured to a point where the outsourcer can facilitate the internal business process on behalf of a business fairly transparently, including business bookkeeping and accounting.

All of this serves to devalue the knowledge required to perform the business and accounting processes. There is a belief that has been marketed very well to the small business sector – “if you can write a check, then you can do your own books”. This concept has not proven as realistic as many would choose to believe. But it earned – and continues to earn –  market share. With the trend in software becoming the transparent outsourcing of the processes, is the consuming market likely to recognize the expertise required to manage the outcome?  Retail providers of accounting, tax preparation, and other services (H&R Block, as an example) have quite successfully marketed against the need for businesses to engage with a skilled credentialed professional.  Accounting professionals who do not view this as a threat to their value are simply not paying attention.

Today’s accounting professional must address the realities of Internet technologies, outsourcing, and retail or consumer-direct competition, and the potential impact it will have on the businesses (the client business as well as the professional practice). Recognizing that accountants (by trade) are not typically technologists, it is important to understand that involvement with the financial processes causes a necessary level of involvement with the technology, as well. Professionals who understand and embrace the appropriate use of technology and outsource models are the professionals who will continue to demonstrate their value and expertise to their client businesses and to the market.

With the industry generally moving towards an online, enabling model, those who do not embrace such technologies will rapidly find themselves attempting to compete. As the trend continues to devalue the backoffice processes by essentially hiding them from the consumer (the client business), the position of the accounting services provider is also devalued.

By embracing the technology/enabling model now, the professional service organization positions itself to function as seamlessly with the market as the online service. A clear example of such activity is the emergence of free e-filing of tax returns and the prevalence of low-cost do-it-yourself business bookkeeping and accounting solutions online. Reports indicate that there continues to be a marked decrease in the number of returns prepared by professional organizations as compared to the significant increase in volumes of online do-it-yourself return processing. This has clearly devalued the tax preparation service in the eyes of the consuming market, bringing it down to a level where price is the sole differentiation.

The solution is to fully “enable” the professional services organization, and provide the foundation for seamless delivery of services to the consumer. Once an online working model is adopted within the professional service organization, it gains the opportunity to change and reconstruct internal systems without concern for direct client impacts.

Just as the online application can render the computing platform irrelevant, so can the professional service delivery render the supporting applications irrelevant. This offers the professional service provider the flexibility and freedom to use or develop systems that create differentiation through the underlying process rather than forcing frequent change upon the client.

Make Sense?

Joanie Mann Bunny Feet

J

Have questions about hosting business applications (like QuickBooks)?Are you looking for help developing your IT-enabling model?  Need assistance convincing clients to use the cloud, or onboarding clients to cloud services?

We can help.

Posted on

The IRS is Spending a Lot of Money to Make a Lot of Money | cashlessandpaperless

Electronic documents and paperless solutions are supposed to help make our lives easier.  By eliminating the paper documents and working with electronic ones instead, users would be able to efficiently manage all their valuable information in one place.  Even more, this information could be shared electronically (swiftly and simply) with others.  However, as most advancements in technology have demonstrated, every solution comes with its own new set of problems.  Where accounting and taxes are concerned, tax payers and the IRS alike are dealing with the impacts of accounting for and substantiating “cashless and paperless” transactions and other activities.  It seems that the IRS is spending more time and resources (=money), expecting that a frontal assault armed with digital records will provide a basis for improved tax collections.

“If you’ve recently been involved in an IRS audit of a business, you have likely seen the agent enter the room fully prepared with copies (subpoenaed) of bank statements and other documentation. It used to be the tax payer who had to provide all the documentation, and the auditor simply used that material. These days, it has become too easy to falsify or improperly change information in electronically stored files (using Photoshop or other tools), so the IRS has lost trust in the data tax payers provide. Instead, they spend a great deal of time and resources collecting this information for themselves (because they can), and then use their copies of the data to compare the data provided by the tax payer.

The IRS will accept electronic records in lieu of original paper documents in many cases, and this is often because they have an ability to validate the content of the electronic records through comparison. Yes, the IRS can collect electronic banking information from financial institutions and other sources, just like the account holder can. It’s become more of a “guilty unless you can prove you’re innocent” approach, and puts the tax payer in a purely defensive posture. Even more, it assumes the tax payer has the sophistication and tools necessary to access and manage all of that electronic data effectively.”

read more at: The IRS is Spending a Lot of Money to Make a Lot of Money | cashlessandpaperless.

Posted on

Cloud Computing Evolved: Disruptive Technology Goes Mainstream

jmbunnyfeetCloud Computing Evolved: Disruptive Technology Goes Mainstream

A 2010 information technology report by IDC (International Data Corporation, a global provider of market intelligence) provided a few interesting predictions for Information Technology in these changing times.  Not surprisingly, many of the predictions centered around the same “ingredients of IT industry transformation” which were identified in past years as being disruptive technologies including cloud computing, mobile devices and applications, wireless broadband, virtualized infrastructure, social networking, and smart devices being among those listed.  The subsequent 2011 report suggested a continuing trend of spending and innovation in cloud technologies and mobile computing and in collecting and analyzing the huge volumes of data being generated.  It is clear that cloud computing is evolving from being disruptive technology to mainstream IT.

Everyone must by now recognize the significant growth in use of online and mobile applications and services.  If you haven’t noticed that just about everyone has a smart phone or tablet computer, then you’ve got your head buried deep in the sand.  What this clearly indicates, and IDC supported the position with quantifiable evidence, is that the “disruptive technologies” of yesterday have transitioned from early adoption to mainstream adoption.   This means that use of these technologies had pushed “well beyond” the first 10 to 15% of the market through 2010, and that customers were ready to integrate these new solutions as core parts of their overall IT strategy.

If you don’t believe that cloud computing, virtualization, and mobile access are becoming (have become?) mainstream, consider the staggering number and variety of mobile devices and networks available today.  The adoption of these devices is driven by the availability of broadband wireless service, and their use is fueled by applications offering “social business” and “pervasive analytics”.  No longer limited as a voice communications device, the mobile phone has now become the mobile workstation, capable of supporting a wide variety of business and personal interactions and functions intended to help users generate and analyze “unprecedented volumes of information” – and the 2011 report indicates that mobile computing is continuing to fuel the trend.

“Mobility wins” will be the top theme of the year as mobile devices outship PCs by more than 2 to 1 and generate more revenue than PCs for the first time. 85 billion mobile apps will be downloaded, and mobile data network spending will exceed fixed data network spending for the first time.

IDC’s 2010 report placed an interesting focus on the impact of this new era of IT, believing that it would be a launchpad for  the creation of “intelligent industry” with an IT-enabled “intelligent economy”.  This doesn’t apply only to those very large multinational corporations, like the IBM commercials about a smarter planet and the commercials where the box tells us where it (and the delivery truck) is.  This new-found intelligence would allow businesses of all sizes to offer better and more customized services locally while dramatically expanding their market reach beyond geographic boundaries, and positioning themselves for accelerated growth.

As the number of intelligent communicating devices on the network will outnumber “traditional computing” devices by almost 2 to 1, the way people think about interacting with each other, and with devices on the network, will change. Look for the use of social networking to follow not just people but smart things.”

Business owners who find a way to leverage this new capability through innovative applications of cloud computing and mobile device access will almost certainly find that their businesses are better suited to addressing the needs of their current market, but are also poised to take advantage of emerging opportunities in emerging markets as well.

In 2010 IDC predicted that by 2012 we would begin to see the “slow death” of cloud computing – the term, not the technology model.  Even though cloud computing is one of the hottest buzzwords in tech today, the model is becoming mainstream to the point where it is no longer considered a bleeding-edge method of computing requiring its own descriptive name. While IDC may have been a bit off in terms of forecasting the slow death of “cloud” terminology, their finding that the evolution of cloud computing models is rapidly progressing from disruptive to mainstream appears to be spot on.

Joanie Mann Bunny FeetMake Sense?
J

updated from original post in 2010
Posted on

Many Companies Are Negligent About SAP Security, Researchers Say – CIO.com

Is your hosting service provider helping to keep your critical business applications secure?  It is not enough to simply harden machine images and develop policy-driven access; application hosting providers need to understand the vulnerabilities introduced by each and every application in the environment.  Otherwise, the system could be exposed to threats directed specifically at the application environment and opportunities it presents.

Many hosting providers will offer customers service for any business application they have, and often provide those services with no significant experience or expertise in dealing with configuration or security issues specific to those applications or environments.  Consider the following report from IDC which indicates that numerous SAP deployments remain vulnerable to attack or intrusion, even though SAP has improved security of the products. The problem rests not exclusively with the SAP applications, but also with the approach to implementation of systems and security around those applications.  Understanding the various vulnerabilities introduced with SAP products is the first step to securing them.  Certainly a skilled IT solution provider is likely to offer a high level of service and capability, but there may be issues presented by various products (like SAP) which introduce additional or unique considerations, and it is important for the service provider to be aware of and address them.

Joanie Mann Bunny FeetMake Sense?

J

IDG News Service — SAP has significantly improved the security of its products over the past few years but many of its customers are negligent with their deployments, which exposes them to potential attacks that could cripple their businesses, according to security researchers.

The biggest issue is that companies expose insecure SAP services to the Internet — not only HTTP services, but also critical administrative interfaces, Alexander Polyakov, chief technology officer at ERPScan, a developer of security monitoring products for SAP systems, said Tuesday.

Between 5 percent and 10 percent of companies that use SAP products expose critical services to the Internet that shouldn’t be publicly accessible, Polyakov said. This happens because they want to enable remote management or because of improper configurations, he said.

Most of the services have vulnerabilities that can be easily attacked, Polyakov said.

Publicly available exploits exist for many SAP vulnerabilities, including some that are part of Metasploit, a popular security testing tool.

The percentage of companies with exposed SAP services differs from country to country. The situation is better in North America and Europe and worse in the Asia-Pacific region, Africa and Latin America, Polyakov said. However, even 5 percent translates to a very large number of companies, he said.

via Many Companies Are Negligent About SAP Security, Researchers Say – CIO.com.

Posted on

HIPAA Privacy and Security and the Cloud

jmbunnyfeet

HIPAA Privacy and Security and the Cloud

Is your cloud solution or hosting service HIPAA compliant?  This is among the most frequently asked questions from professionals shopping for cloud hosting service.  Unfortunately, it is also among the questions most frequently answered with ambiguity, or with naiveté.  The problem is that many businesses dealing with HIPAA compliance responsibilities as it relates to protection and security of personal health information may not fully understand their responsibilities as they extend to outsource IT and other service providers.  In the case of HIPAA compliance, many providers suggest their compliance without truly understanding what it means, and are introducing significant risk to their business and subscribing customers because of it.  With recent changes in rules relating to protection and control of personal health information, it is not just the health care provider, the health plan, 3rd party administrator or others that process health insurance claim information which must agree to provide adequate controls – the requirement may fully extend to business associates of these entities… possibly including their cloud service or hosting solution providers.

Some of the largest breaches reported to HHS have involved business associates. Penalties are increased for noncompliance based on the level of negligence with a maximum penalty of $1.5 million per violation. The changes also strengthen the Health Information Technology for Economic and Clinical Health (HITECH) Breach Notification requirements by clarifying when breaches of unsecured health information must be reported to HHS. http://www.hhs.gov/news/press/2013pres/01/20130117b.html

HIPAA guidelines and rules exist to protect and secure personal health information, a requirement growing in importance with advancements in technology, electronic health records, e-billing solutions, and cloud computing adoption.  Where the regulations were once focused on the entity directly involved in generating or processing the information, the view is now extended not only to 3rd party administrators, but also to the technology solutions and providers involved.  When a “covered entity” (an entity with a responsibility to protect and secure personal health information [PHI]) makes a decision to move this information to the cloud, a number of important and complicated issues must be addressed in the agreements with the service or solution provider.  These issues include security and privacy of information (including providing individuals the right to access and request changes to the stored information), tools which may be provided to allow the customer additional security protection, encryption of data at rest and in transmission (and who holds the keys), data location, return of data, disaster recovery, and service levels.

Cloud provider contracts and business associate agreements with cloud providers are not one-size-fits-all and should be negotiated carefully to protect PHI in a manner that accurately reflects the capabilities of the parties http://www.americanbar.org/content/newsletter/groups/labor_law/ebc_newsletter/12_winter_ebc_news/ebc12winter_cloud.html

The provider delivering cloud hosting services to the business may now be considered to be a “business associate” under HIPAA, meaning that the responsibilities of the Customer (the “covered entity”) also extend to their service provider. For any business operating under a HIPAA compliance requirement, moving to the cloud must necessarily involve a detailed discussion and set of agreements that spell out the “business associate” relationship as well as the details of the service delivery and accepted performance levels.

Joanie Mann Bunny FeetMake Sense?

J

Posted on

QuickBooks In-House Hosting Services for Accountants

QuickBooks Hosting Services for IT-Capable Accountants

DIY-SelfHostingSmall businesses in large numbers are looking to the cloud as a platform to deliver solutions for the problems of escalating IT costs, mobility, and remote access to business data. The cloud is also becoming the recommended platform for the delivery of services from accounting and bookkeeping professionals, as the benefits of remote data access and real-time collaboration nicely address the requirement for accounting pros to exchange and share information with their business clients. One of the popular “cloud” hosting solutions addressing a collaborative accounting model is a hosted application approach to using Intuit QuickBooks desktop products. While accounting professionals may be aware that QuickBooks can be hosted by 3rd party providers, many firms are not aware of what is referred to as the “self-host” model, which is a QuickBooks hosting model for accounting firms with some in-house technical capability.

For small businesses and many accounting service providers, working with a 3rd party hosting provider makes a lot of sense, as the host has the infrastructure and the support organization necessary to service large-scale hosted customer requirements.

On the other hand, there are a lot of accounting and bookkeeping firms which have skilled in-house IT personnel who are more than capable of creating a hosting environment to serve not only their internal needs, but also to meet basic requirements of the QuickBooks-using clients they work with. It makes sense to explore the possibilities of implementing a “self-hosting” model for client access to QuickBooks, overcoming the cost and other barriers involved with 3rd party hosting services.

When an accounting firm works with a number of clients with QuickBooks desktop edition files, the firm has to install and manage not only their own software products, but also the relevant QuickBooks software products in use by the various clients (must have the right QB program in order to open the QB data file). This often puts an undue burden on the internal IT systems of the practice which has its own internal-use software and systems to support. With an internal hosting approach, the firm can provide standardized/centralized application hosting services to their clients, building their own “economy of scale” on the platform and reducing the IT management while achieving all the real-time and remote access benefits of an outsourced hosted model. The firm does not experience a retail cost for a hosting solution, and the cost to host the client is generally offset through the efficiency gained at the firm level through direct access to client data and applications.

The technical model for delivering hosting services to a relatively small client base is not overly complicated. Commercial service providers have complex architectures because they must serve a large and diverse client base, and they never really know what sort of devices (computers and printers) or connectivity the customer may have. Commercial providers have to be prepared to deal with any and all situations, where a “self-host” firm needs only to concern themselves with supporting their particular client users and use cases. Additionally, when the solution is offered as part of the accounting or bookkeeping service, the support requirements of the customer tend to be focused during mutual working hours, as opposed to the 24×7 support demanded of the commercial host.

As accountants and bookkeepers search for solutions to improve efficiency, increase profitability and differentiate services, it makes sense for those serving QuickBooks desktop clients and having an in-house IT capability to explore becoming a QuickBooks self-host. It is one possible way to eliminate cost as a barrier to working closer with QuickBooks desktop clients while providing the mobility and collaboration businesses need.

 

Make Sense?

Joanie Mann Bunny FeetJ