Two recent articles in The Wall Street Journal reignited the debate between spreadsheet defenders and foes. Excel is perennially derided by software marketers selling replacement solutions, yet its usage continues to proliferate. So we need to ask, why are spreadsheets used so often within critical business processes? More often than not, the smart business decision is to keep those spreadsheets in place.
Two recent articles in The Wall Street Journal (Stop Using Excel, Finance Chiefs Tell Staffs , Finance Pros Say You’ll Have to Pry Excel Out of Their Cold, Dead Hands) reignited the debate between spreadsheet defenders and foes as evidenced by hundreds of posts in various social media channels. Excel is perennially derided by software marketers with replacement solutions (e.g., “Spreadmarts are bad!”), yet its usage continues to proliferate. If it’s so risky, so error-ridden and/or inefficient, why is it used so often within critical business processes where the stakes are high? There is no single, one size fits all answer. But more often than not, the smart business decision is probably to keep those spreadsheets and/or spreadsheet-based models in place. Here’s why:
It makes no business sense to impede creativity or take away the flexibility that is vital to high performance. Fortunately, there is a middle ground. The solution is twofold: (1) enable error-free spreadsheets, and (2) to assess the risk and put better controls on your EUCs. Bring them to acceptable levels of risk consistent with, or at least closer to, the inherent risks of IT-managed applications. There are software tools available to help with both of these solutions.
So in closing, should you really defy your CFO? Probably not. That might be a career limiting move on par with being responsible for a material spreadsheet error! But when these conversations happen within your company, don’t choose sides and digress into the stereotypical “good vs. evil” emotional battle. A business need or opportunity exists… find the most effective way to address it while incurring acceptable risk. EUCs that underpin a critical business process yet don’t have effective controls represent an unnecessary, and hence unacceptable risk. But stay focused, don’t succumb to an emotional impulse to throw the baby out with the bath water. Address the core issue – the lack of effective tools to detect spreadsheet errors and lack of effective controls for end-user controlled files. Good IT governance principles are important regardless of whether it is IT-managed or an end-user controlled application. Progressive IT organizations understand that. They should play a constructive role in helping get effective controls in place for your critical spreadsheets. If they don’t, then perhaps that’s a better conversation for you to have with your CFO.
For more information on spreadsheet & EUC risks and how to reduce them, read our white paper, Taming the Spreadsheet Menace.