Interviews

Spreadsheet risk

by Mark Rowe

Chief-level executives and senior managers working in financial services in the UK have dangerously poor attitudes to business critical data managed in spreadsheets and similar databases, it is claimed. Half (51pc) of C-level executives say there are either no usage controls at all or poorly applied manual processes over the use of spreadsheets at the firms, according to research by ClusterSeven. Nine in ten (89 per cent) admit they rely on manual oversight to maintain data integrity, with only one in ten (11pc) saying there is an automated control policy that allows them to fully understand changes between different versions of spreadsheets and see a clear audit trail for data.

The findings are surprising given that 55 per cent of C-level executives rate spreadsheet risk – the risk of serious financial/reputational loss from poor management of corporate spreadsheets and databases – as either ‘very serious’ or ‘serious’, while around one in seven (15pc) admit their firm has suffered a significant data breach. Moreover, in an indication of the significant role spreadsheets play in the modern financial services industry, one in five (19pc) C-level executives say that they use spreadsheets to manage values of over £1bn, with the average from all respondents at £350m. Over nine out of 10 (93pc) use spreadsheets as much as, or more than any other applications for managing financial data with over half (53pc) saying that they either only use spreadsheets or use them more than other applications for managing financial data.

The study by ClusterSeven, a data management firm, comes in the wake of recent, high-profile losses announced by financial services firms attributed to poor spreadsheet management. Also in January, the Basel Committee on Banking Supervision released the report Principles for Effective Risk Data Aggregation and Risk Reporting – the first time that spreadsheet management has ever been specifically mandated at such a high level.

Ralph Baxter, CEO at ClusterSeven, said: “Financial services firms, and the senior managers and executives that run them, rely heavily on spreadsheets for much of their business critical processes. However, there are significant risks associated with this and all stakeholders are now waking up to what these are. Risks include anything from basic ‘cut and paste’ errors to miscalculations, fraud and corrupted files. The losses announced by some large financial services firms are tangible, real-life indications of the dangers and risks firms are exposed to, and it is not surprising that regulators and supervisors such as the Basel Committee are now focusing on spreadsheets as a fundamental carrier of corporate data.

“No longer will it be possible to hide behind overly-optimistic IT plans suggesting that business-critical spreadsheets will soon be eliminated. ClusterSeven has understood this absolute and fundamental use of spreadsheets by the world’s blue-chip institutions since it was founded in 2003, and I’m delighted that this is being corroborated by market and regulatory developments towards best-practice data management.

The research suggests that over half (51pc) of C-level executives think that regulators will become more focused on spreadsheets over the next 12 months. There has been a clear shift in sentiment and now, looking forward, internal audit and other key functions should assess the effectiveness and efficiency of the internal control, risk management and governance systems and provide assurance on these systems. ”

Ralph Baxter added: “Many people will be astonished just how reliant firms are on spreadsheets and similar databases for their day-to-day processes given how many billions of dollars have been invested in standard financial applications, such as ERP and Business Intelligence. Senior managers, including C-level executives, are also spending significant amounts of time on spreadsheets. Where this manual activity is part of routine processes much of this effort can be easily replaced by automated checks using spreadsheet management technology.”

London and New York based ClusterSeven, which has banks as clients as well as insurers and asset managers offers software to provide oversight and transparency of a firm’s databases and spreadsheets.

Research was by Vision Critical on behalf of ClusterSeven at the start of February on 253 C-level executives and senior managers at financial services companies in the UK with 90pc in excess of £50 million in revenue and 10pc between £25-50 million in revenue. For more information about the company, visit www.clusterseven.com.

Related News

Newsletter

Subscribe to our weekly newsletter to stay on top of security news and events.

© 2024 Professional Security Magazine. All rights reserved.

Website by MSEC Marketing