Re: [GNC] {GNC} How secure is Gnu-Cash? Good enough for a credit union?

2020-12-30 Thread Adrien Monteleone
Also, I think most Accounting 101 textbooks include some discussion on 
basic controls.


Regards,
Adrien

On 12/29/20 5:46 AM, David Cousens wrote:

Auditing for Dummies by Maire Loughran  is possibly a good starting point for
the novice.It will require some understanding of accounting however.

Forensic and Investigative Accounting (7th Edition) 7th Edition
by Professor D. Larry Crumbley (Author), PhD (Author), CPA (Author), CFF
(Author), CrFA (Author), Lester E. Heitger (Author), G. Stevenson Smith
(Author) for a deeper treatment which will assume a detailed knowledge of
accounting.

The second is expensive but Amazon can have 2nd hand copies much  cheaper,
particluarly earlier editions.

Any similar titles.


___
gnucash-user mailing list
gnucash-user@gnucash.org
To update your subscription preferences or to unsubscribe:
https://lists.gnucash.org/mailman/listinfo/gnucash-user
If you are using Nabble or Gmane, please see 
https://wiki.gnucash.org/wiki/Mailing_Lists for more information.
-
Please remember to CC this list on all your replies.
You can do this by using Reply-To-List or Reply-All.


Re: [GNC] {GNC} How secure is Gnu-Cash? Good enough for a credit union?

2020-12-29 Thread David Cousens
Auditing for Dummies by Maire Loughran  is possibly a good starting point for
the novice.It will require some understanding of accounting however.

Forensic and Investigative Accounting (7th Edition) 7th Edition
by Professor D. Larry Crumbley (Author), PhD (Author), CPA (Author), CFF
(Author), CrFA (Author), Lester E. Heitger (Author), G. Stevenson Smith
(Author) for a deeper treatment which will assume a detailed knowledge of
accounting.

The second is expensive but Amazon can have 2nd hand copies much  cheaper,
particluarly earlier editions.

Any similar titles.

David



-
David Cousens
--
Sent from: http://gnucash.1415818.n4.nabble.com/GnuCash-User-f1415819.html
___
gnucash-user mailing list
gnucash-user@gnucash.org
To update your subscription preferences or to unsubscribe:
https://lists.gnucash.org/mailman/listinfo/gnucash-user
If you are using Nabble or Gmane, please see 
https://wiki.gnucash.org/wiki/Mailing_Lists for more information.
-
Please remember to CC this list on all your replies.
You can do this by using Reply-To-List or Reply-All.


Re: [GNC] {GNC} How secure is Gnu-Cash? Good enough for a credit union?

2020-12-29 Thread Edward Bainton
Thanks all, that's very helpful.

Can anyone recommend a/the go-to book that outlines (for a novice) those
really basic '100 years ago, this is what we did' controls?

@Adrien that's interesting and makes sense of the standard term in
association rules: 'the Committee must account to the association for the
use of its funds'.

On Tue, 29 Dec 2020 at 02:16, Adrien Monteleone <
adrien.montele...@lusfiber.net> wrote:

> While Rich, Dave & Michael have given you great responses, I'll offer my
> own condensed version:
>
> 'Accounting' is not about 'counting' (the math), but rather about
> control - "Who controls access to what, and how they are held
> 'accountable' for that privilege."
>
> Study methods of literal 'cash' control, and then consider methods and
> means to apply those principles to any non-cash (physical) accounting
> you require. You'll find that those basic principles apply nearly
> universally. 'Control' (in some cases synonymous with 'access') and
> managing it, is key. The application (use case, not computer app) isn't
> relevant to the basic question, but is relevant to the details and
> complexity of the implementation.
>
> For example, proper cash handling/accounting and access/control
> procedures can catch someone stealing a physical $100 bill, not just the
> fact they pilfered $100 total. (I've caught such a case, because those
> procedures were in place.) No software can do this for you. This is
> entirely dependent on procedure and procedure discipline.
>
> Regards,
> Adrien
>
> On 12/28/20 6:01 PM, Edward Bainton wrote:
> > Can anyone give a view on whether Gnucash is suitable for a very small
> > credit union?
> >
> > How would easily can fraud be detected?
> >
> > If not easily, could it be paired with, say, some kind of blockchain
> backup
> > system so as to make fraud detectable?
>
> ___
> gnucash-user mailing list
> gnucash-user@gnucash.org
> To update your subscription preferences or to unsubscribe:
> https://lists.gnucash.org/mailman/listinfo/gnucash-user
> If you are using Nabble or Gmane, please see
> https://wiki.gnucash.org/wiki/Mailing_Lists for more information.
> -
> Please remember to CC this list on all your replies.
> You can do this by using Reply-To-List or Reply-All.
>
___
gnucash-user mailing list
gnucash-user@gnucash.org
To update your subscription preferences or to unsubscribe:
https://lists.gnucash.org/mailman/listinfo/gnucash-user
If you are using Nabble or Gmane, please see 
https://wiki.gnucash.org/wiki/Mailing_Lists for more information.
-
Please remember to CC this list on all your replies.
You can do this by using Reply-To-List or Reply-All.


Re: [GNC] {GNC} How secure is Gnu-Cash? Good enough for a credit union?

2020-12-28 Thread Adrien Monteleone
While Rich, Dave & Michael have given you great responses, I'll offer my 
own condensed version:


'Accounting' is not about 'counting' (the math), but rather about 
control - "Who controls access to what, and how they are held 
'accountable' for that privilege."


Study methods of literal 'cash' control, and then consider methods and 
means to apply those principles to any non-cash (physical) accounting 
you require. You'll find that those basic principles apply nearly 
universally. 'Control' (in some cases synonymous with 'access') and 
managing it, is key. The application (use case, not computer app) isn't 
relevant to the basic question, but is relevant to the details and 
complexity of the implementation.


For example, proper cash handling/accounting and access/control 
procedures can catch someone stealing a physical $100 bill, not just the 
fact they pilfered $100 total. (I've caught such a case, because those 
procedures were in place.) No software can do this for you. This is 
entirely dependent on procedure and procedure discipline.


Regards,
Adrien

On 12/28/20 6:01 PM, Edward Bainton wrote:

Can anyone give a view on whether Gnucash is suitable for a very small
credit union?

How would easily can fraud be detected?

If not easily, could it be paired with, say, some kind of blockchain backup
system so as to make fraud detectable?


___
gnucash-user mailing list
gnucash-user@gnucash.org
To update your subscription preferences or to unsubscribe:
https://lists.gnucash.org/mailman/listinfo/gnucash-user
If you are using Nabble or Gmane, please see 
https://wiki.gnucash.org/wiki/Mailing_Lists for more information.
-
Please remember to CC this list on all your replies.
You can do this by using Reply-To-List or Reply-All.


Re: [GNC] {GNC} How secure is Gnu-Cash? Good enough for a credit union?

2020-12-28 Thread Michael or Penny Novack

On 12/28/2020 7:01 PM, Edward Bainton wrote:

Can anyone give a view on whether Gnucash is suitable for a very small
credit union?

How would easily can fraud be detected?

If not easily, could it be paired with, say, some kind of blockchain backup
system so as to make fraud detectable?

Thanks,

Edward


Fraud detection is a matter of more than one trusted person in control 
of the books. When you say "blockchain backup" you are addressing a 
different problem, whether alteration is possible. Note that there are 
other ways of preventing alteration. For example read only copies being 
given into the custody of other officers of the credit union.


What you should perhaps do is imagine that it was 100 years ago and the 
books were kept the old fashioned way, pen and ink on paper. What are 
the fraud risks and what measures would be needed to prevent or detect 
fraud? Detect is really the key as you can't prevent fraud, only deter 
it because it would be detected. AUDITING is necessary (do the books 
reflect the real world -- spot checking that "the paper" matches what 
has been entered.


Understand? Preventing alteration does not prevent fraud. The fraud 
might be because something was NOT entered.


Michael D Novack

___
gnucash-user mailing list
gnucash-user@gnucash.org
To update your subscription preferences or to unsubscribe:
https://lists.gnucash.org/mailman/listinfo/gnucash-user
If you are using Nabble or Gmane, please see 
https://wiki.gnucash.org/wiki/Mailing_Lists for more information.
-
Please remember to CC this list on all your replies.
You can do this by using Reply-To-List or Reply-All.


Re: [GNC] {GNC} How secure is Gnu-Cash? Good enough for a credit union?

2020-12-28 Thread David Cousens
Edward,

Fraud detection is more a function of overall accounting practice rather
than the accounting software per se although the software implementation can
be designed to support it. Reconciliations  and procedures around the
raising of invoices and paying of bills are often the prime defences.
Control of access to money and strict procedures for recording and handling
cash where each individual's actions can be checked separately are usually
essential. 

GnuCash is really not setup for implementation of the primary controls where
particular functionality is usually handled by separate individuals who only
have access to the specific functionality they use and no access to the rest
of the accounting system with only a financial controller having system wide
access. GnuCash is also not simultaneously accessible by multiple users
without the risk of conflict and loss of data. In a credit union situation
it is likely you would want immediate entry of cash transactions into the
system which might be problematical if you have more than one cashier or
site.

David Cousens



-
David Cousens
--
Sent from: http://gnucash.1415818.n4.nabble.com/GnuCash-User-f1415819.html
___
gnucash-user mailing list
gnucash-user@gnucash.org
To update your subscription preferences or to unsubscribe:
https://lists.gnucash.org/mailman/listinfo/gnucash-user
If you are using Nabble or Gmane, please see 
https://wiki.gnucash.org/wiki/Mailing_Lists for more information.
-
Please remember to CC this list on all your replies.
You can do this by using Reply-To-List or Reply-All.


Re: [GNC] {GNC} How secure is Gnu-Cash? Good enough for a credit union?

2020-12-28 Thread Rich Shepard

On Tue, 29 Dec 2020, Edward Bainton wrote:


Can anyone give a view on whether Gnucash is suitable for a very small
credit union?


Edward,


From my perspective as a long time user and follower of tech security news I

suggest your concern should focus on users, not the software.

Bad actors prefer to use social engineering (e.g., phishing emails,
deceptive web sites) because it's so much easier and doesn't leave signs in
networks or individual hosts.

Whether it's suitable for your credit union should be based on the use cases 
needs
for any bookkeeping software.

My $0.25 (inflation adjusted),

Rich

___
gnucash-user mailing list
gnucash-user@gnucash.org
To update your subscription preferences or to unsubscribe:
https://lists.gnucash.org/mailman/listinfo/gnucash-user
If you are using Nabble or Gmane, please see 
https://wiki.gnucash.org/wiki/Mailing_Lists for more information.
-
Please remember to CC this list on all your replies.
You can do this by using Reply-To-List or Reply-All.


[GNC] {GNC} How secure is Gnu-Cash? Good enough for a credit union?

2020-12-28 Thread Edward Bainton
Can anyone give a view on whether Gnucash is suitable for a very small
credit union?

How would easily can fraud be detected?

If not easily, could it be paired with, say, some kind of blockchain backup
system so as to make fraud detectable?

Thanks,

Edward
___
gnucash-user mailing list
gnucash-user@gnucash.org
To update your subscription preferences or to unsubscribe:
https://lists.gnucash.org/mailman/listinfo/gnucash-user
If you are using Nabble or Gmane, please see 
https://wiki.gnucash.org/wiki/Mailing_Lists for more information.
-
Please remember to CC this list on all your replies.
You can do this by using Reply-To-List or Reply-All.