Sage 100

 View Only
  • 1.  Have you created an type of security workflow on ACH changes that includes notifications internally and externally?

    Posted 07-15-2025 10:39

    I'm working with a client who has had some turnover. As part of the project I'm recommending they tighten their security over ACH changes. The goal is to reduce the likelihood that a third party could pretend to be a vendor and work their way into having someone on the accounting staff make a change to that vendor banking information which resulted in re-routing a legitimate payment to a third-party criminal enterprise.

    Certainly the first thing we are looking at is updating security around PII and ACH. That part is pretty simple.
    And I'm aware that starting with more recent versions of Sage 100 some of these items are written to an audit log.

    Ideally I'd like to automate this and automatically send an email to both the vendor and the internal accounting manager/supervisor when changes happen.

    I'm looking for is the more advanced level steps such as: 
    - Notify the vendor contact via email that ACH information was changed and if they didn't request it to contact the company ASAP
    - A script or some other means to notify of changes internally - email an accounting supervisor that ACH for a vendor was updated/changed? 
    - Have you assisted in creating a policy and procedure type manual that may include the workflow and separation of duties that are recommended? 

    This seems to me like a very high value service that most clients would welcome. And the beauty of it is that the overall process could be applied to nearly every customer.

    Before I reinvent some or all of this I'm interested in what anyone may have already done in this area or feedback around whether you've tried and been met with any type of success?



    ------------------------------
    Wayne Schulz
    wayne@s-consult.com
    Schulz Consulting
    (860) 516-8990
    CT
    ------------------------------


  • 2.  RE: Have you created an type of security workflow on ACH changes that includes notifications internally and externally?

    Posted 07-15-2025 11:33

    @Alnoor Cassim wrote some ACH enhancements for me.  Basically an enhanced log of changes made to the ACH table.  The client is very happy.  I suppose you could use SAW or Visual Cut to email vendors based on changes to this log.  



    ------------------------------
    Jeff Schwenk
    Owner
    Bottomline Software, Inc.
    Waynesboro VA
    (540) 221-4444

    Improving bottom lines for over 25 years!
    ------------------------------



  • 3.  RE: Have you created an type of security workflow on ACH changes that includes notifications internally and externally?

    Posted 07-15-2025 11:46

    You might also include sending email to the original email and changed email of a changed vendor contact email.  An intruder could change the email address to a similar but different email and it may go unnoticed.



    ------------------------------
    Doug Higgs
    Midwest Commerce Solutions, Inc
    (312) 315-0960
    Chauffeur, Chef, and Personal Assistant to Sprinkles
    ------------------------------



  • 4.  RE: Have you created an type of security workflow on ACH changes that includes notifications internally and externally?

    Posted 07-15-2025 11:58

    Wayne - I've done this for 2 people in our community and the first one was @Jeff Schwenk as he mentioned. They were done as script. When ACH banking info is added or changed in A/P Vendor Electronic Payment Maintenance, a detailed email alert noting the specific change(s) is sent to a recipient list. One of the recipients could certainly be the vendor contact.



    ------------------------------
    Alnoor Cassim
    Accounting Systems, Inc. (ASI)
    ------------------------------



  • 5.  RE: Have you created an type of security workflow on ACH changes that includes notifications internally and externally?

    Posted 07-17-2025 09:42

    Thanks, Alnoor. I think this is such a value-added enhancement to offer a customer.
    Especially for customers who are sending regular payments via ACH.



    ------------------------------
    Wayne Schulz
    wayne@s-consult.com
    Schulz Consulting
    (860) 516-8990
    CT
    ------------------------------