I work as a director of operations for a fast-food chain. Our AIS involves one web-based
program called Merit. This is where we process our credit cards, gift cards, vouchers, and
giveaways that is used as a P.O.S. System. Critical data such as personal information,
clock in for payroll, refunds, paid outs and paid ins as well as retrieving sales on the
system. It’s great that this system is easy access for the company and all this information
can be done in one place. Our internal control can be upgraded a bit.
If I were accounting manager, I would implement the stricter internal controls to prevent
fraud and stealing. As of now, our register can open without a key if an employee ring up
an item that is $0. For instant, a water cup. This will allow the drawer to open for
employees to take money. The great thing about the AIS it won’t allow employees to use
management functions without their finger or number but if a manager’s name is assigned
to the register or employees remembers a manager’s function number, it’s open
opportunity for theft. I would suggest changing their number often. I would also see how
to change controls so there would be less chance of a hacker getting into our member
accounts. Only the final four numbers of the credit card are visible because the
information is encrypted, but I think the encryption should be stronger. Even if none of
their information is protected, you can still see everything about them, including their
address, birthday, relations, and photos. I believe that improving communication between
our needs and the AIS programmers would be a good method to achieve this. Any type of
small business can easily use the cookie-cutter program because of its design, but it isn't
necessarily the best application to utilize.
