Because of the ability to code credit memos to any GL account, this risk is similar to the entry of cash receipts in that is allows a user to write off a balance of a customer's invoice. Because the approval of CM's in AR is difficult to do and is generally a detective control rather than a preventive control - this risk is separated from the entry of CM's. In most cases, bank reconciliations, although supported by functionality in Oracle are really being compiled outside the system. |