“They spent two full days on our purchase cycle in Tainan before writing a single finding. The draft called out a duplicate-payment risk we had waved away for years because 'everyone knows the vendors.' We still disagree on how urgent the IT access comment was, but the cash findings were exact.”
Extended note
Purchase cycle review for a regional distributor
A Tainan distributor asked us to look only at purchases and cash disbursements after two near-duplicate payments slipped through during peak season. Over nine fieldwork days we walked vendor master changes, three-way match exceptions, and payment release passwords.
Findings focused on a shared approval login and a vendor-create right sitting with accounts payable clerks. Management accepted both. They declined a broader inventory add-on that quarter—capacity was thin—and scheduled remediation retesting for the following quarter instead.
Three months later, sample testing showed dual release operating on high-value runs. Vendor-create rights were still being tightened; we noted that honestly in the retest memo.