SlideShare a Scribd company logo
Spreadsheet Management with
the new Office
Spreadsheets and databases (known as end-user computing (EUC) applications) are extraordinarily powerful tools that
enable users to store, analyze, and manipulate data efficiently. They have become ubiquitous in firms for a wide range of
activities from financial reporting to securities trading to risk analysis.

Unfortunately, this ease of use often causes EUCs to proliferate beyond the reach of governance rules and IT
administrators. EUC applications may be designed, developed, tested, and used by a small group or even an individual,
and they are often created in response to an immediate need without formal req uirements or management approval.
However, the data they provide is used to create reports and make business-critical decisions. Even if the data and
outputs in an EUC are correct, versions may not be refreshed in step with one another, leading to multiple views of key
performance indicators instead of a unified understanding of a company’s numbers and health.

The results can be dire. Erroneous, incomplete, or fraudulent EUCs can subject companies to unwanted attention from
auditors and regulators and result in noncompliance with regulations promulgated by Sarbanes-Oxley 404, the National
Association of Insurance Commissioners Model Audit Rule, the Office of the Comptroller of the Currency, the Financial
Services Authority, Solvency II, Basel II, and MFID. Companies may even experience significant financial losses.

The reality is that companies may have hundreds or thousands of EUCs lurking in SharePoint or on file shares. Without
the right technology, administrators and compliance officers have no efficient means of finding and managing EUCs, and
users lack the tools to maximize their value without creating unnecessary business risk. Formerly, organizations needing
Microsoft Office EUC discovery, auditing, and management capabilities needed to use costly third-party solutions. In
2011, Microsoft acquired Prodiance, a leading provider of EUC control solutions. This strategic acquisition means
organizations now have access to a comprehensive EUC management toolset, integrated with Excel and SharePoint and
directly supported by Microsoft. With these offerings, organizations can empower users while reducing the risk inherent
in unmanaged EUCs—all with technology that is familiar and integrated with Microsoft Office.




©2012 Microsoft Corporation
Automating Discovery, Inventory, and Risk Assessment
Discovery and Risk Assessment
For many companies, the first challenge in corralling EUCs is finding them. One of the key difficulties presented by EUCs
is that they can be stored virtually anywhere—on SharePoint sites, file shares, and even PCs. Many organizations have
little insight into the sheer number of EUCs in use, let alone how many versions of each exist, which files are business-
critical, and the levels of risk represented by each one. Even for companies with formal rules concerning EUCs,
attempting to manually discover, inventory, and manage them consistently can be difficult or impossible, and linked files
are often missed.

Discovery and Risk Assessment gives companies an easy-to-use, comprehensive way to discover and evaluate EUCs. It
scans network shares and SharePoint document libraries automatically or on demand, creating an inventory of files. Each
EUC is analyzed and assigned a risk level based on complexity measures and business impact, which can be tailored to
the needs of the organization.

Discovery and Risk Assessment helps organizations categorize spreadsheets and Access databases based on robust,
highly configurable rules that enable the evaluation of materiality, complexity, use, and other company-specific
parameters. Spreadsheet content and structure are evaluated, along with linked spreadsheets and queries to external
data. The tool uses a template-based approach that helps organizations get started quickly while enabling fine-tuned
control for a range of corporate governance needs.

In organizations where EUCs are used, management of EUCs is an ongoing process, not a steady state. Discovery and
Risk Assessment is designed with this in mind; it can run on a scheduled basis to find, incorporate, and assess
spreadsheets and databases created by users day after day.



Automating the Spreadsheet and EUC Management Life Cycle
Audit and Control Management Server
Along with the ability to maintain a detailed, up-to-date inventory and assessment, organizations need a way to manage
the actual content and functionality of EUCs. To accomplish this, once EUCs have been discovered, they can be placed
under the control of Audit and Control Management (ACM) Server.

By remotely monitoring files on corporate file shares and SharePoint document libraries, ACM Server captures a cell-level
audit trail of changes to EUCs. This, in turn, supports change control and versioning. ACM Server is a web-based
application that is transparent to users. The administrative user interface of ACM Server is very similar to SharePoint,
making it easier for administrators to learn and use.

When users update EUCs, ACM Server automatically saves that version of the file and tracks what changes the user has
made since the prior version. With ACM Server, an administrator can see, for example, that a formula in a spreadsheet
has been modified, who modified it, and what the previous values were. It maintains a version history to enable historical
comparisons of EUC versions and the ability to revert files that have been corrupted with errors or unauthorized changes.
ACM Server was designed in close partnership with leading tax and audit firms to satisfy mandates for SOX 404, the
NAIC Model Audit Rule, OCC, FSA, Solvency II, Basel II, and MiFID. As such, the application supports all recommended
controls including change control, access control, version control, analytics, backup and archiving, security and data
integrity, and segregation of duties. The result is that your mission-critical EUCs are managed with the highest level of
integrity and trust throughout their life cycle.

With ACM Server, organizations can greatly reduce the complexity of managing EUCs and detect errors or fraud before
they cause financial losses. In tandem with Discovery and Risk Assessment, they can greatly reduce the time and expense
associated with audits.




©2012 Microsoft Corporation
Accelerating EUC Review and Approval
Spreadsheet Compare and Database Compare
Server-based discovery, auditing, and change management tools empower administrators and compliance officers to
manage EUCs across the organization. Users need ways to ensure the quality and consistency of the EUCs they rely on.
Manually tracking and managing changes to shared EUCs can be difficult and time consuming. With more-complex EUCs,
even the most diligent manual comparison can easily miss a change that has significant consequences for the
organization. Spreadsheet Compare and Database Compare are fast, feature-rich, easy-to-use applications that give
users instant and comprehensive insight into the differences between EUC versions.

Spreadsheet Compare and Access Database Compare are standalone applications that come with Office Professional Plus
2013 or Office 365 ProPlus. Spreadsheet Compare can be accessed through the ā€œInquireā€ add-in in Excel. Both
applications enable users to graphically compare two files. For spreadsheets, these include formulas, errors, calculated
values, links, data connections, structural changes, formatting, and names . For Access databases, changes highlighted
include tables, queries, modules, macros, reports, pages, and forms. Spreadsheet Compare automatically detects when
rows and/or columns have been inserted or deleted and realigns rows for more-efficient comparisons. Both applications
enable line-by-line comparisons of macros and VBA code. Comparison results can be exported to Excel for reporting or
further analysis.



Automating Diagnostics, Error Checking, and Optimization
Spreadsheet Inquire
Organizations relying on spreadsheets for financial calculations, business analysis, and other mission-critical tasks need
to know that their models are error-free. Spreadsheet Inquire, included with Office 2013 Professional Plus and Office 365
ProPlus, enables users to easily perform diagnostics, error checking, and optimization from Office Excel 2013 without
specialized expertise. The tool can analyze workbooks, cells, and cell dependencies. Over 40 diagnostics are included
such as formula errors, inconsistent formulas, invisible cells, hidden rows and columns, very hidden worksheets (hidden
by macros), formulas referencing hidden or blank cells, formulas returning text, duplicate formulas, cells with conditional
formatting or validation logic, warnings, and more. The results of such an analysis can be documented in a separate
workbook and submitted with comments by end users. Whether analyzing existing spreadsheets or creating new ones,
Spreadsheet Inquire helps users build quality into the models they rely on for important business functions.



Complete EUC Risk Management with the new Office
EUCs are a crucial part of a wide range of business activities, yet if unmanaged, they create significant financial,
operational, legal, and compliance risk. Now, Microsoft offers a comprehensive suite of tools for discovering, managing,
auditing, and validating EUCs. Organizations can get the full power of EUCs while minimizing enterprise risk. Users are
empowered to implement robust quality assurance procedures, while administrators get company -wide visibility and
control. Whether a company is beginning to get a handle on EUCs or wants to move from a third-party solution to one
that is integrated with Microsoft Office, these new tools will help reduce costs, streamline business processes, and
minimize business risks.

Businesses face mounting compliance challenges given increasing volumes of da ta, rapidly advancing technology, and
ever-more-stringent regulations. That is why powerful, easy-to-use compliance tools are built into the new Office—and
EUC controls are only part of the story. For example, SharePoint now supports robust enterprise cont ent management as
well as unified eDiscovery across SharePoint, Exchange, and Lync from a web -based console. Exchange offers immutable,
in-place archiving that helps organizations simultaneously reduce the cost and complexity of managing archives while
improving experiences for IT and users. Together, these and other capabilities of the new Office help organizations meet
today’s compliance challenges with tools that work together seamlessly and help everyone in an organization manage
risk.




©2012 Microsoft Corporation
How to Get It
                                                    Part of Office
 Tool                         Installed on server                            Notes
                                                    Professional Plus 2013
 Discovery and Risk                                                          Requires ACM Server
 Assessment
                                          X


 ACM Server                                                                  Additional SharePoint ECAL
                                                                             license required. Runs on a
                                          X
                                                                             stand-alone server

 Spreadsheet                                                                 Standalone application also
 Compare                                                                     accessible via Inquire tab in
                                                                X            Excel 2013 (when enabled)
                                                                             as ā€œCompare filesā€

 Database Compare                                                            Standalone application

                                                                X


 Spreadsheet Inquire                                                         Accessible via Excel 2013
                                                                             add-in enabled in Excel
                                                                X
                                                                             Options menu




©2012 Microsoft Corporation

More Related Content

PDF
Chaczko2010
rojabhyf
Ā 
PDF
Application Retirement – Road Map for Legacy Applications
LindaWatson19
Ā 
PDF
White paper gathering tools
Calame Software
Ā 
PDF
Cloud Based Development for Medical Pharmacy and DCA Application
IRJET Journal
Ā 
PDF
An Integrated ERP with Web Portal
acijjournal
Ā 
PPT
Unit V
RichaVerma50353
Ā 
PDF
IRJET- Enabling Identity-Based Integrity Auditing and Data Sharing with Sensi...
IRJET Journal
Ā 
PDF
IRJET- Website Health Checker
IRJET Journal
Ā 
Chaczko2010
rojabhyf
Ā 
Application Retirement – Road Map for Legacy Applications
LindaWatson19
Ā 
White paper gathering tools
Calame Software
Ā 
Cloud Based Development for Medical Pharmacy and DCA Application
IRJET Journal
Ā 
An Integrated ERP with Web Portal
acijjournal
Ā 
Unit V
RichaVerma50353
Ā 
IRJET- Enabling Identity-Based Integrity Auditing and Data Sharing with Sensi...
IRJET Journal
Ā 
IRJET- Website Health Checker
IRJET Journal
Ā 

What's hot (20)

PDF
Electronic form srs
Bek5042
Ā 
PPT
Chapter 05
Amin Omi
Ā 
PDF
Oracle E Business Suite Security Made Easy - Menus, Functions, Responsibiliti...
Louise Abdulkader
Ā 
DOC
Resume from stacy malone
Stacy Malone
Ā 
PPT
Chapter04 automated tools for systems development
Dhani Ahmad
Ā 
PPT
Microsoft SharePoint and the Future of ECM
Greg Clark
Ā 
PDF
Spreadsheet Controls
greghawes
Ā 
PPT
Chapter04
Amin Omi
Ā 
DOCX
Technology Analysis - Social Networking as an Avenue for CRM
Ashley Leonzio
Ā 
DOCX
Assignment 6 - IS Managment Issue Identification
Ashley Leonzio
Ā 
PPT
Chapter02
Amin Omi
Ā 
PPTX
Software Architecture Standard IEEE 1471
vconovalov
Ā 
PPT
Consider byoc as part of desktop as service strategy
Info-Tech Research Group
Ā 
PPTX
Entitlements and balancing information system
ِAbdulla AlShourbagy
Ā 
PDF
IRJET- Restful Backend to Serve any Frontend System
IRJET Journal
Ā 
PDF
IRJET - College Event Management System
IRJET Journal
Ā 
PPTX
Chapter 11 Enterprise Resource Planning System
Muhammad Azmy
Ā 
PDF
Dit yvol4iss44
Rick Lemieux
Ā 
PDF
Logistics Managment Automobile VB6
jawad98
Ā 
PDF
«Integration» - a necessary evil
Fulvio Corno
Ā 
Electronic form srs
Bek5042
Ā 
Chapter 05
Amin Omi
Ā 
Oracle E Business Suite Security Made Easy - Menus, Functions, Responsibiliti...
Louise Abdulkader
Ā 
Resume from stacy malone
Stacy Malone
Ā 
Chapter04 automated tools for systems development
Dhani Ahmad
Ā 
Microsoft SharePoint and the Future of ECM
Greg Clark
Ā 
Spreadsheet Controls
greghawes
Ā 
Chapter04
Amin Omi
Ā 
Technology Analysis - Social Networking as an Avenue for CRM
Ashley Leonzio
Ā 
Assignment 6 - IS Managment Issue Identification
Ashley Leonzio
Ā 
Chapter02
Amin Omi
Ā 
Software Architecture Standard IEEE 1471
vconovalov
Ā 
Consider byoc as part of desktop as service strategy
Info-Tech Research Group
Ā 
Entitlements and balancing information system
ِAbdulla AlShourbagy
Ā 
IRJET- Restful Backend to Serve any Frontend System
IRJET Journal
Ā 
IRJET - College Event Management System
IRJET Journal
Ā 
Chapter 11 Enterprise Resource Planning System
Muhammad Azmy
Ā 
Dit yvol4iss44
Rick Lemieux
Ā 
Logistics Managment Automobile VB6
jawad98
Ā 
«Integration» - a necessary evil
Fulvio Corno
Ā 
Ad

Similar to Spreadsheet Management with the new Microsoft Office (20)

PDF
End User Development - Governance and Risk Management
Daniel Li
Ā 
PPTX
Spreadsheet Compliance and Management in Office and SharePoint 2013 Pitch
Micleus
Ā 
PPTX
EUC Insight Discovery CIMCON Software
part11solutions1
Ā 
PPT
The Use of Spreadsheets: As it relates to Section 404 of the Sarbanes-Oxley Act.
gueste080564
Ā 
PPT
Technology Controls in Business - End User Computing
guestc1bca2
Ā 
PPT
The Use of Spreadsheets: As it relates to Section 404 of the Sarbanes-Oxley Act.
renetta
Ā 
PDF
EUC Insight Discovery CIMCON Software
part11solutions1
Ā 
PDF
Controlling Excel Chaos
greghawes
Ā 
PDF
Top 10 excel analytic tests to minimize fraud and process risks
Jim Kaplan CIA CFE
Ā 
PDF
Data Analytics for Auditors Data Analytics Software
Jim Kaplan CIA CFE
Ā 
PDF
The Enterprise Excel Hell
Backand Cohen
Ā 
PPTX
Internal controls over excel and other user directed aps[feb4.10
Marc Engel
Ā 
PDF
SafepaaS AuditPaaS
Jane Jones
Ā 
PDF
SafePaaS AuditPaaS
Jane Jones
Ā 
PDF
AuditPaas by SafePaaS
Jane Jones
Ā 
PDF
AuditPaaS SafePaaS
Emma Kelly
Ā 
PPSX
What's new in Excel 2013 - Steve Kraynak & Leif Brenne at Eusprig 2014
eusprig
Ā 
PPT
CADA english
IBS Schreiber GmbH
Ā 
PDF
Pw Cwp Spreadsheet404 Sarbox
greghawes
Ā 
PDF
Concerns Examiners Have About Your Spreadsheets and How to Respond
Libby Bierman
Ā 
End User Development - Governance and Risk Management
Daniel Li
Ā 
Spreadsheet Compliance and Management in Office and SharePoint 2013 Pitch
Micleus
Ā 
EUC Insight Discovery CIMCON Software
part11solutions1
Ā 
The Use of Spreadsheets: As it relates to Section 404 of the Sarbanes-Oxley Act.
gueste080564
Ā 
Technology Controls in Business - End User Computing
guestc1bca2
Ā 
The Use of Spreadsheets: As it relates to Section 404 of the Sarbanes-Oxley Act.
renetta
Ā 
EUC Insight Discovery CIMCON Software
part11solutions1
Ā 
Controlling Excel Chaos
greghawes
Ā 
Top 10 excel analytic tests to minimize fraud and process risks
Jim Kaplan CIA CFE
Ā 
Data Analytics for Auditors Data Analytics Software
Jim Kaplan CIA CFE
Ā 
The Enterprise Excel Hell
Backand Cohen
Ā 
Internal controls over excel and other user directed aps[feb4.10
Marc Engel
Ā 
SafepaaS AuditPaaS
Jane Jones
Ā 
SafePaaS AuditPaaS
Jane Jones
Ā 
AuditPaas by SafePaaS
Jane Jones
Ā 
AuditPaaS SafePaaS
Emma Kelly
Ā 
What's new in Excel 2013 - Steve Kraynak & Leif Brenne at Eusprig 2014
eusprig
Ā 
CADA english
IBS Schreiber GmbH
Ā 
Pw Cwp Spreadsheet404 Sarbox
greghawes
Ā 
Concerns Examiners Have About Your Spreadsheets and How to Respond
Libby Bierman
Ā 
Ad

More from David J Rosenthal (20)

PDF
Microsoft Teams Phone - Calling Made Simple
David J Rosenthal
Ā 
PDF
Whats New in Microsoft Teams Calling November 2021
David J Rosenthal
Ā 
PDF
Whats New in Microsoft Teams Hybrid Meetings November 2021
David J Rosenthal
Ā 
PDF
Viva Connections from Microsoft
David J Rosenthal
Ā 
PDF
ProtectĀ your hybrid workforceĀ across the attack chain
David J Rosenthal
Ā 
PDF
Microsoft Viva Introduction
David J Rosenthal
Ā 
PDF
Microsoft Viva Learning
David J Rosenthal
Ā 
PDF
Microsoft Viva Topics
David J Rosenthal
Ā 
PDF
A Secure Journey to Cloud with Microsoft 365
David J Rosenthal
Ā 
PDF
Azure Arc Overview from Microsoft
David J Rosenthal
Ā 
PDF
Microsoft Windows Server 2022 Overview
David J Rosenthal
Ā 
PDF
Windows365 Hybrid Windows for a Hybrid World
David J Rosenthal
Ā 
PDF
Windows 11 for the Enterprise
David J Rosenthal
Ā 
PDF
Microsoft Scheduler for M365 - Personal Digital Assistant
David J Rosenthal
Ā 
PDF
What is New in Teams Meetings and Meeting Rooms July 2021
David J Rosenthal
Ā 
PDF
Modernize Java Apps on Microsoft Azure
David J Rosenthal
Ā 
PDF
Microsoft Defender and Azure Sentinel
David J Rosenthal
Ā 
PDF
Microsoft Azure Active Directory
David J Rosenthal
Ā 
PDF
Nintex Worflow Overview
David J Rosenthal
Ā 
PDF
Microsoft Power BI Overview
David J Rosenthal
Ā 
Microsoft Teams Phone - Calling Made Simple
David J Rosenthal
Ā 
Whats New in Microsoft Teams Calling November 2021
David J Rosenthal
Ā 
Whats New in Microsoft Teams Hybrid Meetings November 2021
David J Rosenthal
Ā 
Viva Connections from Microsoft
David J Rosenthal
Ā 
ProtectĀ your hybrid workforceĀ across the attack chain
David J Rosenthal
Ā 
Microsoft Viva Introduction
David J Rosenthal
Ā 
Microsoft Viva Learning
David J Rosenthal
Ā 
Microsoft Viva Topics
David J Rosenthal
Ā 
A Secure Journey to Cloud with Microsoft 365
David J Rosenthal
Ā 
Azure Arc Overview from Microsoft
David J Rosenthal
Ā 
Microsoft Windows Server 2022 Overview
David J Rosenthal
Ā 
Windows365 Hybrid Windows for a Hybrid World
David J Rosenthal
Ā 
Windows 11 for the Enterprise
David J Rosenthal
Ā 
Microsoft Scheduler for M365 - Personal Digital Assistant
David J Rosenthal
Ā 
What is New in Teams Meetings and Meeting Rooms July 2021
David J Rosenthal
Ā 
Modernize Java Apps on Microsoft Azure
David J Rosenthal
Ā 
Microsoft Defender and Azure Sentinel
David J Rosenthal
Ā 
Microsoft Azure Active Directory
David J Rosenthal
Ā 
Nintex Worflow Overview
David J Rosenthal
Ā 
Microsoft Power BI Overview
David J Rosenthal
Ā 

Recently uploaded (20)

PPTX
cloud computing vai.pptx for the project
vaibhavdobariyal79
Ā 
PDF
Data_Analytics_vs_Data_Science_vs_BI_by_CA_Suvidha_Chaplot.pdf
CA Suvidha Chaplot
Ā 
PDF
Advances in Ultra High Voltage (UHV) Transmission and Distribution Systems.pdf
Nabajyoti Banik
Ā 
PPTX
Dev Dives: Automate, test, and deploy in one place—with Unified Developer Exp...
AndreeaTom
Ā 
PPTX
The-Ethical-Hackers-Imperative-Safeguarding-the-Digital-Frontier.pptx
sujalchauhan1305
Ā 
PDF
Orbitly Pitch Deck|A Mission-Driven Platform for Side Project Collaboration (...
zz41354899
Ā 
PPTX
Applied-Statistics-Mastering-Data-Driven-Decisions.pptx
parmaryashparmaryash
Ā 
PDF
Oracle AI Vector Search- Getting Started and what's new in 2025- AIOUG Yatra ...
Sandesh Rao
Ā 
PDF
Trying to figure out MCP by actually building an app from scratch with open s...
Julien SIMON
Ā 
PDF
Doc9.....................................
SofiaCollazos
Ā 
PPTX
New ThousandEyes Product Innovations: Cisco Live June 2025
ThousandEyes
Ā 
PDF
SparkLabs Primer on Artificial Intelligence 2025
SparkLabs Group
Ā 
PPTX
OA presentation.pptx OA presentation.pptx
pateldhruv002338
Ā 
PDF
How Open Source Changed My Career by abdelrahman ismail
a0m0rajab1
Ā 
PDF
Accelerating Oracle Database 23ai Troubleshooting with Oracle AHF Fleet Insig...
Sandesh Rao
Ā 
PDF
The Future of Artificial Intelligence (AI)
Mukul
Ā 
PDF
Using Anchore and DefectDojo to Stand Up Your DevSecOps Function
Anchore
Ā 
PDF
REPORT: Heating appliances market in Poland 2024
SPIUG
Ā 
PDF
AI Unleashed - Shaping the Future -Starting Today - AIOUG Yatra 2025 - For Co...
Sandesh Rao
Ā 
PDF
Google I/O Extended 2025 Baku - all ppts
HusseinMalikMammadli
Ā 
cloud computing vai.pptx for the project
vaibhavdobariyal79
Ā 
Data_Analytics_vs_Data_Science_vs_BI_by_CA_Suvidha_Chaplot.pdf
CA Suvidha Chaplot
Ā 
Advances in Ultra High Voltage (UHV) Transmission and Distribution Systems.pdf
Nabajyoti Banik
Ā 
Dev Dives: Automate, test, and deploy in one place—with Unified Developer Exp...
AndreeaTom
Ā 
The-Ethical-Hackers-Imperative-Safeguarding-the-Digital-Frontier.pptx
sujalchauhan1305
Ā 
Orbitly Pitch Deck|A Mission-Driven Platform for Side Project Collaboration (...
zz41354899
Ā 
Applied-Statistics-Mastering-Data-Driven-Decisions.pptx
parmaryashparmaryash
Ā 
Oracle AI Vector Search- Getting Started and what's new in 2025- AIOUG Yatra ...
Sandesh Rao
Ā 
Trying to figure out MCP by actually building an app from scratch with open s...
Julien SIMON
Ā 
Doc9.....................................
SofiaCollazos
Ā 
New ThousandEyes Product Innovations: Cisco Live June 2025
ThousandEyes
Ā 
SparkLabs Primer on Artificial Intelligence 2025
SparkLabs Group
Ā 
OA presentation.pptx OA presentation.pptx
pateldhruv002338
Ā 
How Open Source Changed My Career by abdelrahman ismail
a0m0rajab1
Ā 
Accelerating Oracle Database 23ai Troubleshooting with Oracle AHF Fleet Insig...
Sandesh Rao
Ā 
The Future of Artificial Intelligence (AI)
Mukul
Ā 
Using Anchore and DefectDojo to Stand Up Your DevSecOps Function
Anchore
Ā 
REPORT: Heating appliances market in Poland 2024
SPIUG
Ā 
AI Unleashed - Shaping the Future -Starting Today - AIOUG Yatra 2025 - For Co...
Sandesh Rao
Ā 
Google I/O Extended 2025 Baku - all ppts
HusseinMalikMammadli
Ā 

Spreadsheet Management with the new Microsoft Office

  • 1. Spreadsheet Management with the new Office Spreadsheets and databases (known as end-user computing (EUC) applications) are extraordinarily powerful tools that enable users to store, analyze, and manipulate data efficiently. They have become ubiquitous in firms for a wide range of activities from financial reporting to securities trading to risk analysis. Unfortunately, this ease of use often causes EUCs to proliferate beyond the reach of governance rules and IT administrators. EUC applications may be designed, developed, tested, and used by a small group or even an individual, and they are often created in response to an immediate need without formal req uirements or management approval. However, the data they provide is used to create reports and make business-critical decisions. Even if the data and outputs in an EUC are correct, versions may not be refreshed in step with one another, leading to multiple views of key performance indicators instead of a unified understanding of a company’s numbers and health. The results can be dire. Erroneous, incomplete, or fraudulent EUCs can subject companies to unwanted attention from auditors and regulators and result in noncompliance with regulations promulgated by Sarbanes-Oxley 404, the National Association of Insurance Commissioners Model Audit Rule, the Office of the Comptroller of the Currency, the Financial Services Authority, Solvency II, Basel II, and MFID. Companies may even experience significant financial losses. The reality is that companies may have hundreds or thousands of EUCs lurking in SharePoint or on file shares. Without the right technology, administrators and compliance officers have no efficient means of finding and managing EUCs, and users lack the tools to maximize their value without creating unnecessary business risk. Formerly, organizations needing Microsoft Office EUC discovery, auditing, and management capabilities needed to use costly third-party solutions. In 2011, Microsoft acquired Prodiance, a leading provider of EUC control solutions. This strategic acquisition means organizations now have access to a comprehensive EUC management toolset, integrated with Excel and SharePoint and directly supported by Microsoft. With these offerings, organizations can empower users while reducing the risk inherent in unmanaged EUCs—all with technology that is familiar and integrated with Microsoft Office. Ā©2012 Microsoft Corporation
  • 2. Automating Discovery, Inventory, and Risk Assessment Discovery and Risk Assessment For many companies, the first challenge in corralling EUCs is finding them. One of the key difficulties presented by EUCs is that they can be stored virtually anywhere—on SharePoint sites, file shares, and even PCs. Many organizations have little insight into the sheer number of EUCs in use, let alone how many versions of each exist, which files are business- critical, and the levels of risk represented by each one. Even for companies with formal rules concerning EUCs, attempting to manually discover, inventory, and manage them consistently can be difficult or impossible, and linked files are often missed. Discovery and Risk Assessment gives companies an easy-to-use, comprehensive way to discover and evaluate EUCs. It scans network shares and SharePoint document libraries automatically or on demand, creating an inventory of files. Each EUC is analyzed and assigned a risk level based on complexity measures and business impact, which can be tailored to the needs of the organization. Discovery and Risk Assessment helps organizations categorize spreadsheets and Access databases based on robust, highly configurable rules that enable the evaluation of materiality, complexity, use, and other company-specific parameters. Spreadsheet content and structure are evaluated, along with linked spreadsheets and queries to external data. The tool uses a template-based approach that helps organizations get started quickly while enabling fine-tuned control for a range of corporate governance needs. In organizations where EUCs are used, management of EUCs is an ongoing process, not a steady state. Discovery and Risk Assessment is designed with this in mind; it can run on a scheduled basis to find, incorporate, and assess spreadsheets and databases created by users day after day. Automating the Spreadsheet and EUC Management Life Cycle Audit and Control Management Server Along with the ability to maintain a detailed, up-to-date inventory and assessment, organizations need a way to manage the actual content and functionality of EUCs. To accomplish this, once EUCs have been discovered, they can be placed under the control of Audit and Control Management (ACM) Server. By remotely monitoring files on corporate file shares and SharePoint document libraries, ACM Server captures a cell-level audit trail of changes to EUCs. This, in turn, supports change control and versioning. ACM Server is a web-based application that is transparent to users. The administrative user interface of ACM Server is very similar to SharePoint, making it easier for administrators to learn and use. When users update EUCs, ACM Server automatically saves that version of the file and tracks what changes the user has made since the prior version. With ACM Server, an administrator can see, for example, that a formula in a spreadsheet has been modified, who modified it, and what the previous values were. It maintains a version history to enable historical comparisons of EUC versions and the ability to revert files that have been corrupted with errors or unauthorized changes. ACM Server was designed in close partnership with leading tax and audit firms to satisfy mandates for SOX 404, the NAIC Model Audit Rule, OCC, FSA, Solvency II, Basel II, and MiFID. As such, the application supports all recommended controls including change control, access control, version control, analytics, backup and archiving, security and data integrity, and segregation of duties. The result is that your mission-critical EUCs are managed with the highest level of integrity and trust throughout their life cycle. With ACM Server, organizations can greatly reduce the complexity of managing EUCs and detect errors or fraud before they cause financial losses. In tandem with Discovery and Risk Assessment, they can greatly reduce the time and expense associated with audits. Ā©2012 Microsoft Corporation
  • 3. Accelerating EUC Review and Approval Spreadsheet Compare and Database Compare Server-based discovery, auditing, and change management tools empower administrators and compliance officers to manage EUCs across the organization. Users need ways to ensure the quality and consistency of the EUCs they rely on. Manually tracking and managing changes to shared EUCs can be difficult and time consuming. With more-complex EUCs, even the most diligent manual comparison can easily miss a change that has significant consequences for the organization. Spreadsheet Compare and Database Compare are fast, feature-rich, easy-to-use applications that give users instant and comprehensive insight into the differences between EUC versions. Spreadsheet Compare and Access Database Compare are standalone applications that come with Office Professional Plus 2013 or Office 365 ProPlus. Spreadsheet Compare can be accessed through the ā€œInquireā€ add-in in Excel. Both applications enable users to graphically compare two files. For spreadsheets, these include formulas, errors, calculated values, links, data connections, structural changes, formatting, and names . For Access databases, changes highlighted include tables, queries, modules, macros, reports, pages, and forms. Spreadsheet Compare automatically detects when rows and/or columns have been inserted or deleted and realigns rows for more-efficient comparisons. Both applications enable line-by-line comparisons of macros and VBA code. Comparison results can be exported to Excel for reporting or further analysis. Automating Diagnostics, Error Checking, and Optimization Spreadsheet Inquire Organizations relying on spreadsheets for financial calculations, business analysis, and other mission-critical tasks need to know that their models are error-free. Spreadsheet Inquire, included with Office 2013 Professional Plus and Office 365 ProPlus, enables users to easily perform diagnostics, error checking, and optimization from Office Excel 2013 without specialized expertise. The tool can analyze workbooks, cells, and cell dependencies. Over 40 diagnostics are included such as formula errors, inconsistent formulas, invisible cells, hidden rows and columns, very hidden worksheets (hidden by macros), formulas referencing hidden or blank cells, formulas returning text, duplicate formulas, cells with conditional formatting or validation logic, warnings, and more. The results of such an analysis can be documented in a separate workbook and submitted with comments by end users. Whether analyzing existing spreadsheets or creating new ones, Spreadsheet Inquire helps users build quality into the models they rely on for important business functions. Complete EUC Risk Management with the new Office EUCs are a crucial part of a wide range of business activities, yet if unmanaged, they create significant financial, operational, legal, and compliance risk. Now, Microsoft offers a comprehensive suite of tools for discovering, managing, auditing, and validating EUCs. Organizations can get the full power of EUCs while minimizing enterprise risk. Users are empowered to implement robust quality assurance procedures, while administrators get company -wide visibility and control. Whether a company is beginning to get a handle on EUCs or wants to move from a third-party solution to one that is integrated with Microsoft Office, these new tools will help reduce costs, streamline business processes, and minimize business risks. Businesses face mounting compliance challenges given increasing volumes of da ta, rapidly advancing technology, and ever-more-stringent regulations. That is why powerful, easy-to-use compliance tools are built into the new Office—and EUC controls are only part of the story. For example, SharePoint now supports robust enterprise cont ent management as well as unified eDiscovery across SharePoint, Exchange, and Lync from a web -based console. Exchange offers immutable, in-place archiving that helps organizations simultaneously reduce the cost and complexity of managing archives while improving experiences for IT and users. Together, these and other capabilities of the new Office help organizations meet today’s compliance challenges with tools that work together seamlessly and help everyone in an organization manage risk. Ā©2012 Microsoft Corporation
  • 4. How to Get It Part of Office Tool Installed on server Notes Professional Plus 2013 Discovery and Risk Requires ACM Server Assessment X ACM Server Additional SharePoint ECAL license required. Runs on a X stand-alone server Spreadsheet Standalone application also Compare accessible via Inquire tab in X Excel 2013 (when enabled) as ā€œCompare filesā€ Database Compare Standalone application X Spreadsheet Inquire Accessible via Excel 2013 add-in enabled in Excel X Options menu Ā©2012 Microsoft Corporation