BUSINESSCONTROL&YOU--THECFOPERSPECTIVEFORDPROPRIETARYOUTCOMESFORYOU•TakeBusinessProcessControlBasicsandEstablishaCFOPerspective•LeavewithHelpfulToolsFORDPROPRIETARYWHATISBUSINESSCONTROL?AccountingVerificationsSecurityandLocksInternalandExternalAuditChecklistsSignaturesAnyactiontakenbymanagementtoenhancethelikelihoodthatcompanyobjectivesandgoalswillbeachievedonasustainedbasisFORDPROPRIETARYELEMENTSOFBUSINESSCONTROLRiskManagementCorporateCultureProcessesandSystemsMonitoringFORDPROPRIETARYDRIVINGFLAWLESSEXECUTIONBusinesscontroldrivesachievementofgoals!CORPORATECULTURERISKMANAGEMENTPROCESSES&SYSTEMSMONITORINGManagementACHIEVEMENTOFCOMPANYGOALS&OBJECTIVESEmployeesFORDPROPRIETARYWHEREDOYOUFOCUS?TaxComplianceDisasterRecoveryAccountsPayableAccountsReceivableARCollectionsSalesRecognitionFacilitiesSecurityContractManagementEnvironmentalComplianceSafetyEngineeringHealth&SafetyFixedAssetsCreditFinancingInventoryPurchasingVariableMarketingFixedMarketingWarrantyCustomsPayroll&TimekeepingSupplierManagementTreasuryCashManagementJournalEntriesReconciliationProductDevelopmentInsuranceVehicleRemarketingSystemSecurityDistribution&LogisticsFORDPROPRIETARYCFO‘TOPSIX’•GovernanceandEthics•CashandTreasury•AssetIntegrity•Revenue•PurchasingandPayables•AccountingFORDPROPRIETARYGOVERNANCEANDETHICSEstablishingadecisionframeworkfordoingtherightthingCONTROLSAuditCommitteeClearOrganizationalStructureFormalDelegationsofAuthorityPolicyLettersInvolvementofOGCProceduresforReportingUnusualEvents1-800-847-7911POTENTIALRISKS•GOVERNANCE-BusinessMismanagement-Confusion&Inefficiency•ETHICS-LossofReputation-LitigationIssues-AssetLossFORDPROPRIETARYCASHANDTREASURYProtectionandmaximumutilizationofcashandinvestmentassetsCONTROLSAppropriateCashHandlingDelegationsofAuthorityAccountReconciliationHedging&RiskTransferTools•••UseofTreasury&RiskManagementExpertisePOTENTIALRISKS•POORCASHMANAGEMENT-TheftorLossofCash-LossofInterestIncome•POORRISKMANAGEMENT-Currency,InterestRate,&CommodityExposure-LiquidityRisk-Property&CasualtyHazards-DefaultRiskFORDPROPRIETARYASSETINTEGRITYProtectionandusabilityofCompanyphysicalandinformationassetsCONTROLSPhysicalSecurityTagging&CycleCountsReceiving/ShippingProcessesApplicationControlReviewDisasterRecoveryPlanPasswordsUserAccessReviewPOTENTIALRISKS•PHYSICALASSETS-Loss,Theft,orDamage-Waste&Underutilization•INFORMATIONASSETS-Loss,Theft,orDamage-System/BusinessFailureFORDPROPRIETARYREVENUETimelyrecognitionofsalesrevenueandcollectionofreceivablesCONTROLSSeparationofRevenueRecognition&CashHandlingProceduresforRevenueRecognitionAgingFollow-upBadDebtAllowanceAnalysisAccountReconciliationPOTENTIALRISKS•RevenueOver/Understated•OverdueReceivables•IneffectiveCollectionProcess•BadDebtExposureFORDPROPRIETARYPURCHASINGANDPAYABLESPurchasinghighqualitygoodsandservicesandpayingtherightamountattherighttimeCONTROLSUsePurchasingExpertiseBudgetManagementSupplierDatabase/PreferredSupplierListingLowValuePurchaseReviewStandardTerms&ConditionsReceiptVerificationPre-PaymentReviewAccountReconciliationPOTENTIALRISKS•PURCHASING-UnnecessaryPurchase-PricetooHigh-QualityNottoSpecification-ContractsthatDon’tSupportGoals•PAYABLES-PayWrongAmount-PayforGoodsnotReceived-PayWrongTimeFORDPROPRIETARYACCOUNTINGEnsuringthataccountingrecordsareaccurateandmanagedproperlyCONTROLSAccountReconciliationReconcilingItemFollow-upJournalEntryReview&ApprovalUp-to-DateChartofAccountsClosingProceduresBudgeting&AnalysisPOTENTIALRISKS•ACCOUNTSMISSTATED-ImproperEntryMade-LegalExposuretoShareholders/Regulatory•DATANOTUSEFUL-PoorCategorization-Non-Timely•DATANOTUSEDFORDPROPRIETARYEXERCISE:SPECIALMETALSTAMPERS,INC.Method:IndividualExerciseObjective:UsetheCFOTopSixtosiftthroughinformationandfindcriticalcontrolconcernsTime:15minutesInstructions:YouareRobinJames,andtodayyouaretakingoverfromJohnSmithasControlleratSpecialMetalStampers,Inc.awhollyownedsubsidiaryofWeBuildCars.Asyousitdownatyourdesk,younoticeafullin-basketrequiringyourattention.Reviewthenarrativeprovided(asummarizationofseveralintroductoryinterviews)andthecontentsofyourin-box.Whichthreeconcernswouldyoutacklefirst,andwhy?FORDPROPRIETARYBUSINESSCONTROLTOOLS•InternalControlCoordinators•ModularControlReviewPrograms•6-Sigma•TheGAONowthatyouknowwheretofocus,whattoolscanyouusetofindandaddressconcerns?•CorporatePoliciesandStandards•ApplicationControlReview(ACR)•TrainingFORDPROPRIETARYCORPORATEPOLICIESANDSTANDARDSFinanceManual()PolicyLetters()GlobalInformationStandards()CorporateSystemsManual()RequirementsandGuidelinesEstablishedbyOperationsOtherguidelinesareavailableontheprocessowners’sitesFORDPROPRIETARYAPPLICATIONCONTROLREVIEW(ACR)ReviewandapprovalprocessforsystemdevelopmentTheACRprocessrequiresthebusinessownerofaneworfundamentallychangedsystemtocertifycontrolsareinplacebeforesystemlaunch.TheprocessincludesachecklistofcontrolsanddiscussionswithGAOonapreventivebasisEssentialforguardingin