Vendor bank detail changes: five questions before you trust the log
Payment diversion often begins with a quiet edit to bank details. These questions help finance teams prepare for an application audit.
When Wise Digital starts a financial audit of an invoice processing application, vendor master maintenance is rarely a side topic. Changing a supplier’s bank account is one of the shortest paths from a legitimate invoice to diverted cash.
Before fieldwork, finance teams can answer five questions that speed the engagement:
- Who can edit bank details without a second reviewer?
- Are changes logged with before-and-after values, or only a timestamp?
- Does a change freeze payments until confirmed?
- Are callback procedures evidenced outside the application?
- Can temporary or one-time vendors skip the same rules?
If answers are incomplete, that is useful information — not a failure. Bring the gaps to the scoping call. Our full audit engagement treats unresolved bank-edit rights as a priority walkthrough item, especially where shared-service centers process payments for multiple Korean entities.