Field notes
Short writing from our Kuala Lumpur practice on financial controls inside procurement approval applications.
The policy matrix is not the path in the application
Why a laminated approval table can look complete while the live workflow still lets a request skip a named reviewer.
Duplicate vendors and the quiet second payment
How a second supplier record with the same bank account can pass every invoice approval and still be a control failure.
Overrides that never reach the committee
Emergency paths are not a scandal. Unreviewed emergency paths are.
A screenshot of the workflow is not an audit trail
Configuration pictures show how the process is supposed to look. Sampled documents show how it ran.