JPMorgan issued a report titled "Auditing and Compliance Strategies for a Solid Purchasing Card Program," in which some of the nation’s leading companies and universities share real-world best practices for better detecting and controlling purchasing card misuse and out-of-policy spending. As organizations continue to rank procurement card compliance as a top business priority, dozens of JPMorgan commercial card customers offered insights on effective steps they have taken to improve purchasing practices and safeguard against procurement card fraud.
Those surveyed included Arizona State University, Chevron Corporation, ConocoPhillips, George Washington University, International Paper, Monsanto Company, Sears Holdings Corporation, ServiceMaster, Starbucks, University of Illinois, University of Maine System, University of North Texas, University of Pennsylvania and Yale University.
"In today’s highly regulated environment where the main focus is on compliance and auditing controls, a procurement card program provides the foundation and visibility tools to better manage corporate spending," said Rich Erario, Managing Director, Commercial Card and Electronic Procurement, Invoicing and Payables, JPMorgan. "By following the best practices and innovative strategies shared by some of JPMorgan’s procurement card customers, organizations are better positioned to launch an effective card program, improve compliance and auditing processes and practices, and further accelerate efficiency."
Among the ten best practices highlighted in the report are:
* Use technology to streamline back-end auditing. Technology is key to helping card administrators more effectively pinpoint potential card misuse and guide the back-end auditing process. Best-in-class systems enable administrators to block unauthorized purchase categories, monitor corporate compliance, modify spending limits and cancel cards. The card administrators at Starbucks use an online reporting tool on a daily basis to oversee spending in real-time. According to Starbucks: "It is an effective control if employees sense that their spending is being monitored. The card is for business purposes only, not for personal use."
* Mandate training for cardholders before a card is issued. Education and a clear understanding of cardholder roles and responsibilities are vital to any program. Once an application is received, companies should consider having card applicants participate in some form of training course before they receive their card. Best-in-class companies keep education at the forefront and train early and often. Chevron Corporation employees are required to take a training course every two years to continue using the card. Monsanto requires that its cardholders take a computer-based training course and receive a score of at least 100% in order to apply for their card. Upon completion of the course, users receive a "digital diploma" or certificate that then must be submitted along with their application.
* Audit beyond the traditional. Best-in-class organizations enhance their auditing practices by looking beyond traditional controls such as cardholder spending limits and restricted Merchant Category Codes. Organizations should consider conducting audits on purchases that are made in the evening or on weekends. Purchases that are shipped to an individual’s home as opposed to campus or a business address should also be investigated. Other items that could be red-flagged are personal technology purchases such as computers, cell phones, PDAs and items acquired using PayPal or through sites like eBay.
* Conduct periodic peer reviews before official audits occur. To mitigate improper card use and help support Sarbanes-Oxley requirements, best-in-class organizations also perform ongoing peer reviews of purchasing practices well in advance of regularly scheduled audits. International Paper’s purchasing card practices are audited every other year by internal audit. In anticipation of these audits, cursory peer reviews are conducted annually at each location. Divisions also perform monthly transactional reviews. The purchasing card program at Monsanto is audited at least twice a year, once by an internal team and once by an external firm. Card administrators prepare for these audits by conducting approximately 8 random audits per month and reviewing at least 40 percent of spend.
For a free copy of the report, visit www.jpmorgan.com/visit/pcardaudit. For further information on JPMorgan Commercial Card Solutions, visit www.jpmorgan.com/commercialcard.
AboutJPMorgan Treasury Services
The Treasury Services business of JPMorgan is a top-ranked, full-service provider of innovative payment, collection, liquidity and investment management, trade finance, commercial card and information solutions to corporations, financial services institutions, middle market companies, small businesses, governments and municipalities worldwide. With more than 50,000 clients and a presence in 39 countries, JPMorgan Treasury Services (JPM TS) is the world’s largest provider of treasury management services. JPM TS is a division of JPMorgan Chase Bank, N.A., member FDIC. More information can be found at www.jpmorgan.com/ts.