more-arw search

Q&A Forum

Anyone have suggestions for resources on establishing controls over the Master Vendor File?

Julie Hammeras's Profile

Accounts Payable Best Practices

I was looking for some accounts payable best practices ideas about setting stronger controls over our AP vendor files and found the table of contents to BNA's 2006 publication "Master Vendor File Maintenance, Audit & Control, Best Practices".  It looked great but is no longer in print.  Does anyone have a copy, or any other resources you've used to set up controls over the AP Vendor files? 


Topic Expert
Nicole Lucarelli
Title: Director
Company: Financial Services
LinkedIn Profile
(Director, Financial Services) |

I have not used a particular resource, but some items to think about as you put your policy in place: 1) who can make changes (no one who can cut checks at a minimum), 2) what information is required from the vendor, 3) how to avoid duplicate records, and 4) how to keep the information updated. There are services you can use as well to "clean" your file if it currently has some of these issues. I've used Dunn and Bradstreet; I'm sure there are others. I believe the IRS has a resource as well to check the validity of tax ids. I would also suggest working with your Procurement Department. They may have some perspective on what is required to setup a new vendor or help get information from vendors they are in contact with. They generally have their own thoughts about how to control vendor usage and may want to contribute to your process.

Topic Expert
Linda Wright
Title: Consultant
Company: Wright Consulting
(Consultant, Wright Consulting) |

In addition to Nicole's comments, I would offer that I actually pitched and landed the entire procure to pay cycle as part of my Operations and Finance Department. We did not allow anyone to be paid, who was not in the vendor master, without special clearance. This practice slowed rogue spend and also allowed us to capture economies of purchasing power.

(Agent, JKS Solutions, Inc.) |

Controls over the vendor list have to do with ensuring that all vendors are valid and approved. A company should establish a Vendor Management Policy that should cover approval of vendors, approval authority matrix, contract approval review controls and any other policy controls over procurement in general.

Only one person should be allowed to create a new vendor. Vendors should be evaluated for related party relationships and marriages between your firm and theirs. Many times sales people are married to their best client's senior managers or directors and profit by the level of commissions their spouses earn on the sales. This happens in consulting firms but can happen in other companies as well.

The vendor list is easy to review. If you are looking for employee fraud you might try comparing payroll direct deposit accounts to the vendor ACH accounts. Sometimes they are the same due to employee fraud. Its a simple test, download and pivot and vlookup to match.

One major company I know of inactivates all vendors at the end of the year and reactivates them only as payments are made, each is reviewed for validity.

Vendors with similar names are suspect. Vendors that do not answer their phones are suspect...the list goes on.

COSO should address most of your concerns.

Topic Expert
Barrett Peterson
Title: Senior Manager, Actg Stnds & Analysis
Company: TTX
(Senior Manager, Actg Stnds & Analysis, TTX) |

There are a number of controls, but most critical are to limit those able to modify [add, change, delete, block for payment, etc.] the master file and establishing a process to "suspend" or park al such changes for acceptance/approval by a designated manager. Appropriate documentation standards for each type of change need to be established and reviewed by the approving manager. We require all new US or Canadian vendors to be "verified" as acknowledged by US and Canadian services that will acknowledge a name and identification combination as in agreement with their records...or not in agreement.


Get Free Membership

By signing up, you will receive emails from Proformative regarding Proformative programs, events, community news and activity. You can withdraw your consent at any time. Contact Us.

Business Exchange

Browse the Business Exchange to find information, resources and peer reviews to help you select the right solution for your business.

Learn more

Contribute to Community

If you’re interested in learning more about contributing to your Proformative community, we have many ways for you to get involved. Please email [email protected] to learn more about becoming a speaker or contributing to the blogs/Q&A Forum.