Authors
Pat Cleary, David Ball, Mukul Madahar, Simon Thorne, Christopher Gosling, & Karen Fernandez
Abstract
There is an overlooked iceberg of problems in end-user computing. Spreadsheets are developed by people who are very skilled in their main job function, be it finance, procurement, or production planning, but often have had no formal training in spreadsheet use.
IT auditors focus on mainstream information systems but regard spreadsheets as user problems, outside their concerns. Internal auditors review processes, but not the tools that support decision-making in these processes.
As highlighted by Systems Modelling Ltd. (2003) the questions that need to be raised are:
- Are any important decisions made in your company supported by spreadsheets?
- Have these models been tested or reviewed?
- Do you have internal standards for spreadsheet development?
We all know that people make mistakes. Yet end users and their managers have the confident belief that their work is perfect.
This paper highlights the gaps between risk management and end user awareness in spreadsheet research. In addition the potential benefits of software agent technologies to the management of risk in spreadsheets will be explored.
This paper will also discuss the current research into end user computing and spreadsheet use awareness. The bulk of current research, as below, is taken from two Master's Dissertations completed by Chris Gosling and Karen Fernandez. These two authors completed their research in May 2003 at the University of Wales Institute Cardiff (UWIC). The research focuses on a large NHS trust and Revlon respectively.
Sample
Research objectives.
UWIC aims to "Investigate the means to raise awareness amongst organisations about the importance and the impact of errors in spreadsheets and investigate how Agent Technology can be used to monitor/rectify the occurrence of such errors."
This aim shall be accomplished with the help of the following objectives:
- To identify the possible risks involved in spreadsheets.
- To classify/categorise these errors in spreadsheets.
- To formulate a risk management strategy for each category of risks.
- To implement the formulated strategy.
- To monitor the effects of the strategy.
- Create a specification(s) for agent design based on the strategy(ies) formulated for the reduction of risk in categories of spreadsheet use.
- Amend that specification in line with current technological capabilities.
- Develop agents using existing technology to meet the above specification(s).
- Deploy the agents in a test environment.
- Develop means of monitoring the effectiveness of the agents.
- Modify agent design in the light of experience.
Publication
2003, EuSpRIG