ARMI - KN

Customer Invoicing in NetSuite is a streamlined yet multi-step process. It starts with the creation of a quote and moves through several stages—sales order, fulfillment, and finally, the generation of the invoice. For several organizations, it begins when a sales rep creates a quote, detailing the products or services and their associated costs to their customer. Once the customer approves, authorized users can automatically convert the quote into a sales order. After generating the sales order, the fulfillment process begins, delivering the goods or services to the customer. Then, authorized users can quickly generate an invoice from the sales order and fulfillment records and send it to the customer. Careful handling at each step ensures everything runs smoothly, making it an efficient process when done right.

Role customization in NetSuite is a powerful tool for tailoring user access to align with specific job functions. It gives organizations the flexibility to control access based on their operational needs. Administrators can choose between copying and modifying existing roles or building roles from scratch. Each method offers distinct advantages depending on an organization’s situation. 

In NetSuite, revenue elements play a vital role in the overall revenue management system. Revenue elements are fundamental components within the NetSuite realm of revenue recognition. And represent individual line items in sales transaction records and their associated revenue arrangement records. As per NetSuite, Revenue Elements are “records that correspond to individual lines in a source. Each revenue element represents a performance obligation. Revenue elements appear as lines on a revenue arrangement.” This segmentation allows organizations to track and manage their revenue streams with precision, ensuring they recognize revenue in alignment with the requirements set forth in accounting standards, such as ASC 606.  

When it comes to managing customer invoices in NetSuite, enabling invoice approval routing is an important step in maintaining control over the billing process. First, navigate to the Accounting Preferences page in NetSuite and select the Approval Routing tab. Here, you can activate invoice approval routing, which enables organizations to build a customized workflow process within SuiteFlow. A customized workflow ensures the right individuals review invoices before sending them out. Workflow setups help businesses enforce oversight, reducing the risk of errors, fraud, or unauthorized invoice processing. 

When it comes to access management in NetSuite, global permissions serve as a strategic tool for fine-tuning access on an individual level. This offers administrators a way to tailor user access beyond the limitations of role-based assignments. Rather than adhering strictly to roles, global permissions enable administrators to assign specific access rights directly to users. This targeted approach means an individual can receive the correct level of access needed—no more, no less— and without the need to modify or expand existing role structures. These permissions are particularly useful in scenarios where users’ responsibilities blur traditional role boundaries or require flexibility beyond predefined group settings. 

Key Stakeholders, Controls, and Risks 

Designing a manual AR invoicing workflow in NetSuite requires more than following a standard template. It demands a thoughtful approach to ensure operational resiliency and strong financial controls. Involving key stakeholders, such as sales management, IT, and compliance, is essential. This collaboration helps create a process aligned with financial policies and operational goals. Each team plays a unique role: from IT configuring the system to sales and finance managers embedding necessary compliance checks and authority limits. Cross-functional collaboration across IT and business management is essential to ensure a strong workflow is implemented. 

In NetSuite, permissions grant access to specific functions, defining exactly what users can see and do within the system. These fall into four main types: Transactions, Setup, Lists, and Reports. Each plays a unique role in shaping user access and safeguarding sensitive data. Understanding these categories is key to creating roles that not only fit specific job functions but also keep your environment secure and compliant. 

Organizations are implementing new SaaS ERP systems to modernize their enterprise.  Traditional cybersecurity risks are being outsourced to the software provider, yet certain cybersecurity risks still need to be addressed by management.

Having been in the Security and Controls space for far too long, I have witnessed and am still witnessing a phenomenon that needs to be addressed.  Auditors talk WAY too much about Segregation of Duties.

Oracle ERP / HCM Cloud is an evolving suite of applications. Most organizations that consider implementing an ERP/HCM Cloud likely believe the “foundation” of the applications are solid.  Unfortunately, that is not the case.  We currently track over 200 enhancement requests that we, and others, have submitted.  However, there are some significant gaps for public and private organizations, especially those that need this highest level of security via Oracle’s FedRamp offering.