BlackLine Enhanced Financial Controls and Automation Platform
by user
Comments
Transcript
BlackLine Enhanced Financial Controls and Automation Platform
ICAEW Accreditation Scheme Online Financial Controls and Automation Software BlackLine Enhanced Financial Controls and Automation Platform Evaluation carried out by John Oates Date completed: 18 December 2015 Signed: John Oates Table of Contents 1 Summary ……………………………………………………………………… 3 2 Approach to evaluation ……………………………………………………… 3 3 Matters to consider before purchase ……………………………………….. 4 4 Evaluation conclusion ……………………………………………………….. 8 Disclaimer …………………………………………………………………………............ 9 5 System Security and Access Controls ……………………………………… 10 6 Implementation ……………………………………………………………… 18 7 Data Import Process .………………………………………………………... 21 8 Services & Support …..……………………………………………………… 24 9 Enhanced Financial Controls and Automation Platform …………...……. 28 10 Software Functionality ………………………………………………...……. 29 11 Account Reconciliations …………………………………………………….. 33 12 Transaction Matching ………………………….…………………………… 37 13 Task Management ……………………………….………………………….. 39 14 Journal Entries ……………………………………………………………… 44 15 Variance Analysis ………….………………………………………………... 49 16 Consolidation ………………………………………………………………… 52 17 Intercompany ………………………………………………………………... 55 18 User Documentation ………………………………………………………… 57 2 1 Summary 1.1 Introduction Financial controls and automation software requirements vary dependent upon the businesses requirements at the time of purchase. Both business and user requirements should be fully considered before entering into any software purchase. Software as a Service (SaaS) allows users to access software from any location where they have internet access. Users benefit from the collective community as enhancements and new versions are uploaded seamlessly without any IT requirement. The quality of the software developer should also be considered at the onset. 1.2 Fundamentally, SaaS accounting platform should: Be capable of supporting the accounting functions for which it was designed Provide facilities to ensure the completeness, accuracy, confidentiality and continued integrity of these accounting functions Be effectively supported and maintained It is also desirable that good accounting software should: Be easy to learn, understand and operate Be administered by Finance teams Adhere to all current data security regulations Have a good audit trail Provide dashboard visibility across all processes Provide online training certification for users It is essential, when SaaS software is implemented, for appropriate support to be available 24 hours a day, 7 days a week. 2 Approach to evaluation 2.1 Objective To evaluate BlackLine against a set of criteria developed by the ICAEW to ensure that the software meets the requirements of a SaaS Accounting Platform, as laid down in the summary above. 2.2 Approach and Work performed In order to effectively evaluate BlackLine, a product specialist from BlackLine completed the detailed questionnaire and provided it to the evaluator to examine. The evaluator then visited the BlackLine office in London and in conjunction with the operation of the various aspects of the software assisted by a member of BlackLine technical staff checked the answers to confirm their validity. The questions were individually reviewed and commented on and the majority of assessments were confirmed. 3 The evaluator discussed the assessments with a member of BlackLine staff in order to clarify certain points. In the event of disagreement between BlackLine and the evaluator, the evaluator's decision was taken as final and the response changed accordingly. BlackLine Version 7.3.6.351 was used throughout the evaluation. The evaluation covered the fully integrated SaaS platform for enhanced controls and automation of financial close processes covering Account Reconciliations; Transaction Matching; Variance Analysis; Task Management; Journal Entry; Consolidation Integrity Manager and Intercompany hub. When the evaluation had been completed, the responses were completed by the evaluator and a draft copy sent to the ICAEW for review before completion of the final report. 2.3 Software/hardware utilised The accreditation evaluation was performed using version 7.3.6.351 on a standard wifi connection. A Dell Latitude laptop with Chrome Browser was used to demonstrate the platform, though this cloud-based software can be used on anything including a tablet. There is no restriction on what is seen, except for the mobile version. The dataset for the evaluation demonstration is taken from demonstration data located in the US. However, an instance also exists with the data retained within the EU. 2.4 Report structure The report has been broken down into its main constituents in the contents page. The evaluation questionnaire was provided by the ICAEW and has been used without alteration or amendment. 3 Matters to consider before purchase 3.1 General overview BlackLine Finance Controls and Automation Platform consists of 7 modules spanning finance and accounting processes that are typically performed during the financial ‘close’. (‘Close’ is the portion of the accounting cycle when figures are substantiated and analysed, so that financial reporting can be prepared). The platform also extends to purpose-built solutions for business process including intercompany, financial transformation, controls assurance, and a comprehensive reconciliation solution. 3.2 Supplier background BlackLine’s platform and modular range of solutions was originally developed in 2001. The software was introduced to meet the demands of Sarbanes-Oxley (SOX) compliance regulation. Finance professionals worked directly with product development to provide additional functionality as requested by the user community as the company clients grew in number. BlackLine has headquarters in Woodland Hills, California, USA and operates additional offices in the US (Atlanta, Chicago, New York City), Canada (Vancouver), France (Paris), Australia (Sydney, Melbourne) and the UK (London). For more information on BlackLine and its products and services please refer to www.blackline.com 3.3 Product background and Suitability for user The first implementation of the software was in 2005. 4 BlackLine provides enhanced financial control and automation for close processes. There is strong integration between the seven modules in the platform that enables the introduction of workflow across the close processes. The BlackLine solution is highly configurable to address the specific needs of individual customers, as well as the needs of end users. As a web-based SaaS application, BlackLine is globally accessible, 24/7/365. With BlackLine, the client is not required to purchase, install or maintain any software/hardware. It is designed for clients to receive rapid deployment, and obtain 24/7 instant access to their instance from any location. 3.4 Typical implementations BlackLine software is implemented across all industries in mid- to large enterprise clients. Number of users range from 10 to thousands globally depending upon the client’s business requirement. The software can be implemented by the client themselves with BlackLine Implementation Consultants and/or clients can choose to work with any of the fully certified third-party implementation partners. 3.5 Vertical applications BlackLine clients often run shared service operating models for finance and accounting processes. In some instances they operate a hybrid model using the services of a third party Business Process Outsourcer (BPO) to deliver certain Finance and Accounting Processes that are required for the close. 3.6 Software specifications 3.6.1 Development environment Format Process Development Environment Version control Planning and work tracking Issue / Bug tracking Documentation Test / Quality Assurance 3.6.2 Agile development process Microsoft Visual Studio Git Atlassian Jira Atlassian Jira Atlassian Confluence Atlassian Jira, code scans, and various QA tools. BlackLine utilises both automated and manual QA testing for all releases Server platforms BlackLine clients can choose whether to store their data in EU or U.S. data centres. The EU primary data centre is in Amsterdam; the secondary is in the Greater London area. The U.S. primary data centre is in Virginia; the secondary is in Florida. 5 BlackLine Systems has complied with the U.S. –EU Safe Harbor Framework and the U.S.Swiss Safe Harbor Framework as set forth by the U.S. Department of Commerce regarding the collection, use and retention of personal information from European Union member countries and Switzerland. BlackLine Systems has certified that it adheres to the Safe Harbor Privacy Principles of notice, choice, onward transfer, security, data integrity, access and enforcement. In light of recent EU legal decisions, as an alternative to Safe Harbor, BlackLine now offers customers a data processing addendum to their agreements that incorporates the European Commission’s standard contractual clauses, commonly referred to as “model clauses”. Use of these model clauses will allow for the continued transfer of personal data under EU data protection laws. 3.6.3 Databases Microsoft SQL Server Database 3.6.4 Operating software ASP.NET 3.5; SQL Server 2014 Microsoft Windows Server 2012 R2 3.6.5 Minimum client PC specification Any machine capable of running a modern ‘Web Browser’ 3.6.6 Support and maintenance BlackLine is a SaaS offering. All maintenance is provided in-house by BlackLine personnel. Support is available to clients on a 24 hour, 7 days a week basis. 3.7 Software installation and support BlackLine is a SaaS offering and does not require client installation. Support is provided to clients free of charge on a 24 hour, 7 days a week basis. User licence fees are based on a number of factors including desired functionality and number of users; BlackLine should be contacted for a cost quotation. The standard BlackLine service level agreement (SLA) allows for credits for any downtime under the 100% uptime service level. 3.8 Partner network and related accreditation process BlackLine states, “Working together with our global network of Partners to deliver world-class cloud business software and outstanding service for more customers in more places means added strength. As an organisation, we understand that there is a necessity to meet local needs while also 6 addressing the global requirements of many of our customers. To complement our direct sales teams, our partners offer local sales, marketing, services and support, delivering topclass localized services. “Fundamental to our partner strategy is bringing excellence and added value to every phase of the product lifecycle - from partners at the strategic level through to channel partners, outsourcing partners and implementation partners at the delivery level. These relationships increase the value of our solutions and BlackLine to our customers —value that comes from leveraging domain expertise, long-term partnership and investments, and qualified and efficient delivery that reaches every corner of the globe, and support to help BlackLine customers meet their unique regional and local requirements. Channel Partners “Channel Partners play an integral role in supporting BlackLine's overall product strategy. Our Channel Network is a key part of our success, and our goal is to provide our partners with best-in-class financial solutions to help them build a sustainable and profitable business. BlackLine recognizes local relationships with customers and offers a partner program designed to preserve those relationships on an ongoing basis while expanding the reach of BlackLine. Business Process Outsourcing Partners “BlackLine has formed partnerships with leading providers of finance and accounting outsourcing and transformation services to automate and control the financial close process. These outsourcing partnerships allow companies to leverage providers’ expertise, best practices and efficiencies, so management can focus on core business activities. “BlackLine's Business Process Outsourcing (BPO) Partners provide BPO services and Business Process as a Service (BPaaS) solutions for BlackLine's SaaS Financial offering. Similar to our BlackLine end-customers, our BPO partners can reduce costs, improve efficiency and visibility, and speed time to value with a single platform that scales from small clients to global enterprises. BlackLine Technology and Implementation Partners “BlackLine technology partners help us deliver the best possible services to our clients. An extension of our team, they demand the same high standards and quality of service we do— and we wouldn’t accept any less. “BlackLine has built a global community of highly qualified technology and implementation partners who provide expert quality implementation and related services. Our partners work closely with BlackLine to provide our customers with deep industry vertical experience and best business practices. “BlackLine technology and implementation partners are all certified by BlackLine and on an ongoing basis. BlackLine ensures our partners maintain the highest functional and technical qualifications and expertise to support the full BlackLine product portfolio in the global geographies and target markets we serve. 7 Alliances and System Integrators “BlackLine has formed strategic alliance partnerships with a number of expert consultants and service providers to help our clients meet broader needs, such as finance transformation, change management and advanced implementation services. “Our strategic alliance partners are unique and diverse, ranging from the Big Four public accounting firms to small consulting practices. From North America and EMEA to APAC and South America, they have a global reach to match BlackLine’s and bring their own expertise and impeccable service to every client. “BlackLine shares tactical and strategic plans with our Alliance network, working together at the planning, design, and operational levels to ensure our products and services leverage each other, delivering the greatest value to our BlackLine customers. BlackLine Affiliate and Referral Partners “BlackLine Affiliate and Referral Partners introduce BlackLine to prospective customers and in return receive a referral fee. Many Affiliate and Referral Partners also come to be recognized as BlackLine experts and respected advisors. Our referral programme is complementary to our BlackLine sales organisation, with BlackLine absorbing the cost of selling, closing, implementing and servicing companies referred.” 3.9 Limitations There are limitations in the product which while not adversely impacting upon this evaluation may be of importance to certain organisations. It is important that any organisation contemplating the purchase of software reviews the functionality described and limitations therein against its detailed requirements. Attention is drawn in particular to the following areas where the product, on its own may not be suitable for organisations with certain specific requirements: The system does not create Gantt Charts in the reporting; this is scheduled to be in the product in 2015 Language and localisation such as date format is set up by users via their Browser settings Older insecure browsers are not supported. This includes Internet Explorer version 7 and earlier Image based files such as jpeg, tiff, pdf files cannot be read by system for transaction matching. However, these image files can be attached within the system as supporting documents Workflow approvals are limited to five levels of certification. 4 Evaluation conclusion There were no areas in the evaluation that gave concern. BlackLine is a well-designed SaaS financial controls and automation platform that will be supported directly by BlackLine or certified partners. 8 In terms of the functionality that is present in the current version and the target market for this product, the product has been adequately specified. It is easy to use, administered within the finance team, and provides real time finance data in an online dashboard format. Disclaimer Any organisation considering the purchase of BlackLine should consider their requirements in the light of proposals from BlackLine and potential suppliers of other similarly specified products. Whilst the contents of this document are presented in good faith, neither ICAEW nor John Oates can accept liability for actions taken as a result of comments made herein. 9 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question 5. Supplier Response Evaluator’s Comment System Security & Access Controls 5.1 Is data stored within this application encrypted? Yes. BlackLine encrypts all client Noted data both in transit and at rest. 5.2 How is a client’s data kept segregated from that of other clients on the platform? Each client has their own unique Noted URL and a dedicated database and document repository. 5.3 Has the vendor achieved any type of certification in respect of the internal IT controls that it operates, e.g. ISA3402/SSAE16? BlackLine is annually audited to Noted ISAE 3402, SSAE 16, AT Section 101 standards, and Systrust/ Webtrust principles. BlackLine is the first provider in its space to receive the highly regarded ISO/IEC 27001 certification, confirming that the company meets or exceeds the latest information security industry standards. 5.4 Has the vendor achieved any specific security certifications, e.g. ISO/IEC 27001? Yes. BlackLine 27001certified. 5.5 Describe the tools, infrastructure, and processes that are in place to ensure enterprise-grade reliability, security, and performance. BlackLine uses firewalls, Intrusion Noted Detection System (IDS) and log management tools to monitor and maintain a secure environment. System monitoring tools are used to assess performance and early identification of problems and errors. All client data is encrypted at all times. Hot disaster recovery (see below) and full nightly backups ensure business continuity. Actual up-time over the past 2 years is 99.99%. 5.6 Are information security policies reviewed and updated periodically? If yes, how often? Yes. All information security Noted policies are reviewed annually (typically in June/July) or as warranted based upon emerging threats and changes to information 10 is ISO Noted Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment security best practices. 5.7 Is there a documented disaster recovery and business continuity programme that is sponsored and approved by senior management? If so, has the DR plan been formally tested and any issues identified been actioned and how often are DR tests undertaken?” Yes. Noted BlackLine will provide the client with a Hot Disaster Recovery (HDR) service. The HDR service includes a fully mirrored disaster recovery data centre which contains a mirror image of the customer’s production. BlackLine performs a nightly backup as an added layer of data protection in addition to BlackLine's continuous server backup. BlackLine conducts annual DR tests. The last test was performed in late 2014 and was 100% successful. 5.8 What is the Recovery Point Objective (RPO) and Recovery Time Objective (RTO)? BlackLine has a defined a one-hour Noted Recovery Point Objective (RPO) and two-hour Recovery Time Objective (RTO). 5.9 Is antivirus software and spyware detection and protection included? Yes. Antivirus and antimalware Noted tools are maintained internally by Blackline to secure the environment. 5.10 Is client access to the service via a secure connection (e.g. SSL)? Yes. BlackLine uses TLS/SSL and HTTPS technologies. 5.11 Is an Intrusion Detection System (IDS) used? Yes. BlackLine uses IDS tools to Noted monitor and maintain a secure environment. System monitoring tools are used to assess performance and early identification of problems and errors. IDS configuration settings are monitored and reviewed on a periodic basis. IDS rules are updated automatically as soon as updates are available. Alerts are responded to 24x7. Yes. BlackLine uses a battery of Noted tools for real-time health, 5.12 Is there a formal process for identifying threats 11 Noted Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question and vulnerabilities (through early detection alerts, vulnerability scans, etc.) and tracking remediation? Supplier Response Evaluator’s Comment performance, and security monitoring for hardware, servers, and applications. The tools are managed by production operations, Network Operations Centre (NOC), and InfoSec teams, who respond to alerts 24x7. 5.13 Are periodic penetration tests performed against your Internet-facing network and systems by a specialist third-party provider? Yes. Tests are performed annually Noted or as needed. 5.14 How regularly are critical patches applied to systems and/or infrastructure? Yes. BlackLine follows vendor Noted patch cycles. Through our Premier Support Services Agreement with Microsoft, we receive most system patches early with Microsoft's full support in order to deploy them as quickly as possible to our customers’ environment. 5.15 Is there a formal and documented process for employee and customer account management that includes provisioning, password requirements, and access controls? Yes. Our systems and policies are Noted designed to enforce principles of least-privilege and "need to know"; BlackLine staff access privileges are reviewed and promptly removed if no longer appropriate. On the client side, the customer’s designated system administrator manages all user provisioning, password requirements, and access controls, in accordance with customer’s policies. 5.16 What form of user authentication are supported, e.g. user name/password, certificates, tokens, etc? The BlackLine solution offers both Noted web-forms authentication and Single Sign-on (SSO) capabilities (via Active Directory Federation Service 2.1 [ADFS] and SAML 2.0). BlackLine supports multifactor authentication through integration 12 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response with clients’ (SAML2.0.). identity Evaluator’s Comment providers 5.17 Does the application implement password enforcement policies, such as minimum length, complexity, not allowing the use of generic usernames/passwords, expiration and re-use restrictions? Yes. The client's system Noted. Set up screens reviewed administrator can configure the password requirements including the password length, upper-case characters, lower-case characters, numbers, special characters required, the unsuccessful number of attempts before lockout, forcing a history of previous passwords, and more. 5.18 Does the system enforce a maximum password age? Yes. The password change interval Noted is a configurable setting within BlackLine. 5.19 Does the application have a password history functionality enabled such that passwords cannot be reused within a predefined period of time? Yes. This is a configurable setting Noted within BlackLine. The client’s system administrator can set the number of previous passwords to prevent users from using those prior passwords. 5.20 Does the application have the ability to integrate with federated single sign-on solutions/protocols (e.g. using SAML)? Yes. Active Directory Federation Noted Service 2.1 (ADFS) and SAML 2.0 provide a Single Sign-On Solution (SSO) to the BlackLine application 5.21 Describe the options available to allow (rolebased) user security groups. BlackLine's Team functionality allows multiple users to have access to a given account. This could be required when people "share" responsibility for getting a reconciliation done or when people work together to accomplish the completion of the reconciliations process. Anyone on the Team can access the reconciliations with any role they are authorized for in the BlackLine application. 13 Noted. The set up was reviewed and discussed, including setting up of users, their responsibilities and access permission processes for all in their teams Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment 5.22 Does the system enforce account lock-out after a specified number of incorrect authentication attempts? Please describe. Yes. The account lock-out is Noted configurable. The client’s system administrator can define the maximum failed login attempts, as well as a failed-attempt expiration period. 5.23 Does the system enforce a session time-out after a pre-defined amount of user activity? Please describe. Yes. Users are logged out after 60 Noted minutes of inactivity or the allotted time desired by the client, as the timeframe is configurable. 5.24 Does the application provide protection (encryption/hashing) for stored passwords and other sensitive data? Yes. Passwords are stored using irreversible salted hashes (SHA512). 5.25 What processes are in place to revoke access rights of users who have left an organisation? Yes. Client’s designated system Noted administrator can disable the account of a terminated user (i.e., mark the account as “inactive”). 5.26 Are system log files retained for a specified period of time to assist in access control monitoring and security investigations? Yes. BlackLine’s tool offers administrators an audit trail indicating workflow processes including action taken, user who completed, data imported, login/out, password reset, user modification, time/date stamp, and any attempts to modify or delete data. Audit logs within the application can be retained indefinitely by the client. 5.27 Does the application perform data validation for inbound data to identify common attacks (e.g. SQL Injection, XSS)? Yes. In order to prevent code Noted injection, XSS (Cross-Site Scripting), and similar issues, BlackLine performs weekly application security scans and conducts developer training. BlackLine's policies and procedures comply with Open Web Application Security Project (OWASP) recommendations. In addition, 14 Noted Noted. Set up and example log files reviewed, together with individual transactions, user ID, date, etc Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment BlackLine operates a number of security and health monitoring tools, including IDS, security logging and event management. Our operations team receives alerts from the tools and responds to them 24x7. All vulnerabilities, critical incidents, and security breaches are remediated immediately. 5.28 Does the product/service require the use of any technologies that may be considered as a security risk? e.g. ActiveX, JavaScript, Cookies. If so, describe how the user can mitigate this risk. No. BlackLine only uses cookies for Noted session management. There is no personally identifiable information in BlackLine session cookies, and they expire at the end of the session. 5.29 Does the application employ encryption technologies to protect customer data during transit? Yes. All data in transit is encrypted Noted using TLS (Transport Layer Security Protocol) certificates and HTTPS protocols. 5.30 Does the application provide an audit trail for administrators? If so, describe the detail available within the trail. Yes. BlackLine provides multiple Noted and reviewed audit trails. Administrators can access an audit trail indicating workflow processes including action taken, user who completed, data imported, login/out, password reset, user modification, time/date stamp, and any attempts to modify or delete data. Audit trails also track changes to critical settings, and saved items within the application track the user along with the date and timestamps. For the reconciliations audit trail, the application tracks the user who completed, the associated level (prepared, approved, reviewed), the reason, and the time/date stamp. 5.31 Is a system log Yes. Noted 15 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question • • • • maintained by the service provider that details User access User activity Error messages Security violations? If so, is this log available to the customer? 5.32 Are there processes available to the customer to carry out backups? If so, please describe together with the process available to the customer to test restore the data. Supplier Response Evaluator’s Comment BlackLine logs access and activity by our staff, as well as error messages and security violations. BlackLine InfoSec incident response procedures require immediate client notifications in case of security incidents that involve clients’ data; logs can be requested as needed through support. Yes. Customers’ administrative Reviewed – example set up and users can export data from the worked through application in CSV format. BlackLine itself provides both a hot disaster recovery service (continuous mirroring) and nightly backups. BlackLine itself provides both a hot disaster recovery service (continuous mirroring) and nightly backups. Customers may also request restoration of their data by opening a support ticket. 5.33 Are there policies and procedures in place for the disposal of customer information? Please describe. Yes. All data will be deleted in a Noted secure, DoD (US Department of Defense) compliant manner. 5.34 What are the implications of the Data Protection Act over information held and processed by the service provider? BlackLine Systems complies with Noted the US–EU Safe Harbor Framework and the US-Swiss Safe Harbor Framework as set forth by the U.S. Department of Commerce regarding the collection, use and retention of personal information from European Union member countries and Switzerland. BlackLine Systems has certified that it adheres to the Safe Harbor Privacy Principles of notice, choice, onward transfer, security, data integrity, access, and enforcement. 16 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response (https://safeharbor.export.gov/compa nyinfo.aspx?id=26978) Our registration is current, thus providing appropriate protection for the information of all European subjects. In light of recent EU legal decisions, as an alternative to Safe Harbor, BlackLine now offers customers a data processing addendum to their agreements that incorporates the European Commission’s standard contractual clauses, commonly referred to as “model clauses”. Use of these model clauses will allow for the continued transfer of personal data under EU data protection laws. 17 Evaluator’s Comment Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question 6. Supplier Response Evaluator’s Comment Implementation 6.1 Please describe in no more than 500 words a typical implementation process. If so, is there a “standard” implementation process? In which case, please describe each stage. Upon initiation, BlackLine’s Noted implementation team will schedule a project initiation call to discuss the specific details regarding the project plan and its corresponding timeframes. Our process includes project planning, data collection / extraction, system testing, data validation, user training and go-live phases. BlackLine standardizes their implementation strategy and uses a “train-the-trainer” approach to ensure the client team is capable of maintaining and accessing the application even after completion. To get users trained and ready for their new system, BlackLine offers access to a free e-learning portal filled with dozens of online classes. If the client ever needs additional assistance, BlackLine offers 24/7 live support at no additional cost. 6.2 How long does a typical implementation take? Please give an indicative range. BlackLine’s implementation Noted typically takes between 4-12 weeks elapsed time. The fastest BlackLine implementation of a major client was accomplished in 7 days. As we only offer a hosted solution, there is no lengthy installation process. The implementation timeframe is primarily dependent on the availability of client data and resources. 6.3 What variables can extend or accelerate an implementation? The implementation process varies Noted depending on the data and types of resources provided by the client. Other pertinent factors include the size of the company, number of users, locations, interfaces, and the client's response time. BlackLine can work closely with the client to accelerate the implementation 18 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment process, provided we have all necessary resources and contacts. BlackLine can definitely accommodate more aggressive implementation schedules should the client request a faster process. 6.4 What resources are committed to the project by the vendor? BlackLine assigns clients an Noted implementation consultant to guide them through the implementation process. In many cases, our implementation consultants are former BlackLine users who implemented the tool at their last company. The client’s dedicated implementation expert will have the ability to draw on a wide variety of internal BlackLine resources as needed. 6.5 What resources (technical or otherwise) are required by the client/customer for implementation? In most cases, the client will need to Noted have an IT resource or business user to build and deliver the data files to BlackLine. A project owner will be needed to guide the project on the client side which will include identifying and gathering data elements for populating into BlackLine as well as making key decisions on settings and configuration. 6.6 Do a majority of implementations require third-party assistance (i.e., consulting, professional services)? No, a majority of our clients selfimplement. Guidance and supporting documentation is provided to the client. Configuration is accomplished through clientcontrolled settings within the application. 6.7 What is the average amount of professional services required to Third party assistance is often provided when the client has insufficient resources, or where the resource available are already fully committed to the “day job”. It is not unusual for clients to treat this as an opportunity to transform their processes, so they may use an external consultant This can vary greatly depending Noted upon the size of the client and the scope of the implementation, but the 19 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question implement the solution? Please provide indicative time-ranges for specific integration types, e.g. an integration with SAP B1 may take between X and Y? Supplier Response Evaluator’s Comment average direct professional services time will average between 25 and 40 hours. Professional services are priced based on customer needs. 6.8 Does the implementation require custom coding? No, configuration is done within There is no custom coding. This BlackLine via client-controlled has the advantage of allowing all settings. updates to be applied immediately 6.9 Are custom reports usually written or is the default set are normally taken and amended by the customer? BlackLine provides over 90 standard reports; custom reports can be created by the client, through our Enhanced Reporting option. Enhanced Reporting can be used to make modified versions of the standard reports, or reports can be created completely from scratch. 6.10 How is implementation billed, e.g. a flat fee or hourly? Implementation time can be Noted purchased in a package of hours or hourly. The initial purchase will typically include a package of implementation hours and will be billed upfront with the initial purchase. If additional hours are required, they are billed as they are incurred. 20 Users can amend standard reports, and can also create their own using standard reports as a base. The system appears intuitive with editing through drag and drop of fields, grouping and the use of filters and similar Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question 7. Supplier Response Evaluator’s Comment Data Import Process 7.1 Describe how the data is received from an ERP system? Is it batch (schedule/triggered), what has to be done to initiate an import and how the import is validated. The ERP system will interface with BlackLine's application via secure FTP site. Interfaces are scheduled to run per the client's needs and can be modified by the business or system administrators. Noted Data validation is inherent to the BlackLine application. If data is imported, the fields are validated to ensure that the expected value types are received. Validations also include prevention of duplicate accounting strings in the same account balance load and ensure that the provided entities have been set-up within the application. Errors are also displayed within the administrator's import screen. Appropriate corrections will need to be made and amended records would then be re-imported. 7.2 How are new accounts created/uploaded/added? When new balances or details are imported, the application automatically recognises the new data and creates a new account. If the client has set up Rules-Based Administration, which automatically configures accounts according to user-defined logic, the account will be automatically configured and assigned. If not, the new account will appear on the system administrator’s dashboard in order to be properly assigned. Any items coming in not recognised are placed in an “unassigned” area. The administrator knows these need to be assigned and will be prompted to assign them through the Home Admin screen 7.3 What happens if data imports to a closed reconciliation (due, perhaps, to a late journal entry)? If there is a change in an already certified reconciliation, the system will decertify it, update the reconciliation balance so that it is back in sync with the underlying GL system, and alert the preparer of the changes via email. Noted 21 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment 7.4 How does the customer know if all data was successfully imported? If the import fails, describe the process that follows. The system will automatically notify the client via email if an error occurs with an import. In addition, administrators can view the results of all imports and compare to expected results. Any failed imports are notified to the administrator, who can also pick this up from reviewing the input status screen 7.5 Is an audit trail / log available that shows the process completed. If so, describe the details available to the customer. Yes. Client’s administrators have access to an import status screen which includes import file name, date and time stamp, job status, lines loaded, and import errors (if any). As above 7.6 What ERP systems connect with the product BlackLine can be configured to seamlessly interface with any mainstream ERP or GL system as well as many sub-ledgers in order to automatically retrieve data. BlackLine uses standard import templates for most data imports. These formats are set-up intuitively and provide consistency between different data imports. Files are sent to an SFTP site in a tabdelimited text file format. Import interfaces are scheduled to run automatically at the client's desired frequency, with data pulled into BlackLine accordingly. Noted For a partial list of successful integrations by ERP, please visit https://www.blackline.com/financecontrols-andautomation/solutions/by-erp. 7.7 For those that connect, is the BlackLine is a certified Gold vendor a certified partner? member of the Oracle Partner Network. We are also a member of the SAP Partner Edge program as an SAP Software Solutions Partner and have a certified SAP Ecohub partnership. The BlackLine 22 Noted Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment Finance Controls and Automation Suite for SAP® Solutions is an SAP-endorsed business solution. If so: 7.7.1 Does the vendor provide a Connector for each? 7.7.2 What transactions will these Connectors execute? BlackLine offers an SAP Connector for its SAP clients. We also offer a NetSuite-certified NetSuite connector. In cases where BlackLine does not have a pre-built connector, we configure the data interface during implementation. The SAP connector allows clients to extract account balances, AR/AP sub-ledger balances, GL transactions, Open Item Management transactions, and currency rates from SAP/; format them appropriately; and automatically load these items into the BlackLine application. BlackLine journals can be posted back into SAP. The NetSuite connector can import account balances, GL transactions, bank transactions, currency rates, entities, and saved searches. 7.7.3 Does these connectors operate on a scheduled basis? Please explain what these schedules are. 7.8 Is the application endorsed by these partners? The connectors run on a schedule per the client’s request. Journals can be posted in real-time. Yes, the BlackLine Finance Controls and Automation Suite for SAP® Solutions is an SAPendorsed business solution. SAP is the only partner that currently provides endorsements. 23 Noted Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question 8. Supplier Response Evaluator’s Comment Services & Support 8.1 Describe your support model, BlackLine’s application does not Noted e.g. direct from software require ongoing support from the house, via VAR, other? client’s technical or IT team. The subscription fee includes all aspects of operating BlackLine’s application including: • 24/7/365 BlackLine Customer Service; • Full provision, maintenance and support of the online platform from Blackline’s technical Team; and • Client dedicated instance of the application, supported by BlackLine. VAR: Channel partners provide level 1 support. Level 2 and 3 are provided by software house. 8.2 If VARs are involved, what accreditation process does the VAR have to take? BlackLine partners must attend required training and pass the certification exam to provide support to end customers. The VAR channel has been running for a year, so it is “early days” re assessing the Partner Channel. There is currently only one VAR in Europe. 8.3 Is there cost associated with support? If so, is it compulsory? No. Our BlackLine U learning Noted management system, our online help functionality, the BL User Community, and our 24/7 support is all included. However, if onsite training is required there will be an additional consulting fee. 8.4 How does the customer contact support? BlackLine support is accessible Noted 24/7/365 via email, phone, or through our online support portal. 8.5 What organisations will assist in providing support? In other words, is any part of the support process outsourced? 8.6 Describe your training When VAR/channel partners are Noted involved, they provide level 1 support. Level 2 and 3 are provided by software house. BlackLine offers online role- Noted 24 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question programme and by whom it is provided. Supplier Response Evaluator’s Comment based training, customized training, train – the - trainer programme, end user training, and BlackLine U which provides all the necessary tools needed to learn the entire application. This is in addition to live webinars where users can attend and ask questions of a BlackLine expert. All training is online and is provided free of charge. In addition, many of the training courses offer free CPE credits. BlackLine has created role-based training materials to ensure that users learn the appropriate skills. The training is available online at all times and can be accessed directly through BlackLine’s solutions. Once implementation is complete, the client will be assigned an Account Manager/Owner for any assistance. Some support may be provided by BlackLine’s channel partners, as described in item 8.1 above. 8.7 Is there an additional charge associated with training? No. Noted 8.8 How is training for new features handled? BlackLine delivers new feature There are live webinars, and workshops with every new release then followed by live on-line to ensure that users and training and on-line help organisations utilise the latest features. The new feature workshops are posted within BlackLine U based on our software release schedule. They typically occur every quarter. These recorded videos are essential for learning about the latest features and taking advantage of all that BlackLine’s solutions offer. 25 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment 8.9 Is there a charge for continuing training on new features or functionality? No. All online training is Noted provided free of charge. Onsite training is available on a consulting basis. 8.10 What other support services are provided? Is there an additional cost for these? BlackLine provides all backups, Noted disaster recovery, maintenance, support of the platform, and all other additional services to maintain the instance at no additional charge. 8.11 What is the frequency of upgrades? What costs are applicable? BlackLine releases new features Noted and enhancements quarterly and performs monthly patches to address maintenance issues. In all cases, upgrades are scheduled well in advance, never occur during the close, and are performed out of hours with little impact on the business user. There is no charge for upgrades or maintenance and no client resources are required, including IT support on the client-side. Clients are notified well in advance and are offered related training classes several weeks prior to an upgrade or release. If a client has concerns or questions related to any upcoming changes as a result of patches or version upgrades, these can be relayed to Blackline support. 8.12 What guarantees does the supplier give in relation to service availability / uptime / maintenance? BlackLine’s uptime target is Noted 100% (excluding emergency and scheduled maintenance). This is included within our SLAs, and customers can receive credits for any downtime under the 100% uptime service level. ‘Appendix B –Service Level Agreement,’ in our standard master subscription 26 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment agreement provides details: http://www.blackline.com/assets/d ocs/uploads/BlackLine-SystemsMSA-REV-H-4-2.pdf. 8.13 What arrangements are available in respect of ESCROW, where appropriate? Cloud vendors would not put code Noted in Escrow as clients are merely buying a service and do not own any software. Customer data is of course a separate issue; the customer data belongs to the customer. Our Master Subscription Agreement includes a 180-day “sunset clause.” In addition, as noted in item 5.32, "Customers’ administrative users can export data from the application in CSV format." Supporting documents can also be exported, in their original formats. 27 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question 9. Supplier Response Evaluator’s Comment Enhanced Financial Controls and Automation Platform 9.1 What is the scope of the software solution? Does it offer a unified platform, with wide-ranging functionality to address business needs? BlackLine is built to address all the financial close processes that exist within the “last mile of finance.” This includes the validation of information and necessary adjustments before a client’s financials are published. BlackLine covers account reconciliations, analysis of variance fluctuations, highvolume reconciliations, transaction matching, consolidation reconciliations, multi-statutory reconciliations, risk analysis, auditor evaluations, tracking of control testing, month end close validations, audit compliance and completion, booking of journal entries, intercompany transactions and supporting documentation for management review and control on financials. Noted 9.2 Are all the elements of the platform built on a uniform or disparate code base (i.e., multiple databases, multiple programming languages, etc.)? BlackLine was built organically from the ground up on a uniform code base. This provides deep integration within our platform. Noted 28 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question 10. Supplier Response Evaluator’s Comment Software Functionality 10.1 Detail in no more than 500 words how customers are typically using your company’s services. Most clients use BlackLine for all Noted of their “last mile of finance” processes which includes account reconciliations multi-statutory reconciliations consolidation reconciliations high-volume reconciliations month end close tracking recurring journal entry tracking audit and compliance testing and tracking variance fluctuations booking of journal entries, etc. BlackLine’s platform covers the expansive segment which Gartner defines as Enhanced Finance Controls and Automation. BlackLine currently has over 1,000 clients using its platform. 10.2 How does the product allow the finance and accounting function to be self-sufficient when managing, configuring and adjusting the application? Within BlackLine, the client Noted controls the settings and configuration. It is built intuitively which allows the system to be managed by business users and does not require the client to have its own IT team to manage the application. BlackLine provides support and training with our online help, documented implementation guides, 24/7 support team, and our learning management system, BlackLine U. 10.3 Is the product intuitive and Yes. BlackLine’s platform was Demonstrated. 29 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question easy-to-use? 10.4 Does the tool include standardised templates for different types of account Supplier Response developed by accountants, for accountants. BlackLine was developed internally, rather than through acquisition or outsourced development. The entire product exists on the same code base and is both easy to implement and possesses a standard UI. Most importantly, we actively solicit and incorporate client suggestions into our product, with the goal of providing a solution that incorporates best practices from many different clients. We want the BlackLine application to be robust, but easy and intuitive to use. Our "go to" search feature allows users to immediately go to a desired page, which limits the number of page downloads to navigate within the application. User-saved filters and settings allow users to go to the proper page and role within the application to easily access the desired information. BlackLine also provides keyboard shortcuts and tab accessibility and simple, translatable language except where necessary to convey technical language. Additionally, our searchable online help feature allows users to search an online directory for assistance. The help feature combines step-by-step instructions in understandable language along with applicable screenshots for performing most tasks within the application. This allows users to easily find what they are looking for and to move at their own pace. BlackLine comes with nine standard templates, each of which is designed with a particular type 30 Evaluator’s Comment Users are given their own dashboard for each module they use. From this it is easy to see the status of the tasks still outstanding. All items in this can be clicked on, drilled into, amended, etc. The style is very consistent from module to module, with lots of drag and drop, checklists, etc. and no program coding to be seen Noted Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question reconciliations (e.g., suspense accounts, accrued expenses, or pre-paids)? Is there a cost associated with custom templates? How does the product handle varying customer requirements? 10.5 How many languages and currencies are supported? Evaluator’s Comment Supplier Response of reconciliation in mind. Clients also gain access to a template builder at no additional charge, which allows them to configure their reconciliation templates as they see fit. There is no customized work required, meaning a client is not reliant on BlackLine when it wants to make changes. Finally, each template offers the option to display policies and procedures for the preparer’s convenience and for audit purposes. See also 11.1. 15 languages are supported, including Chinese (Simplified, zhCHS), Chinese (Traditional, zhT), Czech, Dutch (Netherlands), English, French, German, Hungarian, Italian, Japanese, Polish, Portuguese (Brazil), Korean, Russian and Spanish. (Note: 11 are single-byte while 4 are double-byte). All ISO currency codes supported. Currency conversion rates are uploaded by the client. BlackLine stores these and uses them every time an item is brought in. Reconciliations are normally based on month-end rates determined by the client are BlackLine supports full multicurrency. Currency types displayed and translated include transactional, functional, account, and reporting. These different currency GL balances are imported directly from the client’s ERP. BlackLine can also automatically perform currency conversions when exchange rates are imported into the application. 10.6 Can supporting documentation and comments be attached to all functional areas of the platform? Yes. All supporting documentations and comments can be added throughout the platform and can be carried forward to subsequent months 31 Noted Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment automatically. BlackLine can accept supporting documents in any file format. 10.7 Is there integration between modules (i.e., can you use matching and directly push items from matching to reconciliation, with no exporting or importing)? Discuss the integration between the different aspects (offerings) within your product? BlackLine was built on a single, Noted integrated code base from the ground up. This provides an easyto-use product and provides deep integration between modules without the cumbersome extracts and reloads that exist with competitor products. Integration between Account Reconciliations and Transaction Matching allow for drilling into details and pushing of unmatched items directly to the reconciliation. Consolidation reconciliations are linked to underlying account reconciliations. Transaction Matching functionality can be used for daily reconciliations and automated creation of journal entries. Explanations of variance fluctuations can link back to the completed reconciliation. 10.8 How long can client data be stored in the application? Client can store data indefinitely for as long as the client desires. We have clients with over 10 years of data on their production instance. Noted 10.9 Does the tool automatically date and time stamp key stages in all aspects of the financial close processes within the platform? Yes. BlackLine’s platform offers audit trails which track the date and timestamp for workflow, adding of items/ documents/ comments, user logins, and adjustments to key settings. For the individual certifications, the audit trail tracks the user who completed, the associated level (prepared, approved, reviewed), the reason, and the time/date stamp. Noted 32 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question 11. Supplier Response Evaluator’s Comment Account Reconciliations 11.1 Does the platform provide a built-in library of standard reconciliation templates / tasks? Yes. BlackLine currently has nine “out of the box” account reconciliation templates: Amortizable Prepaid, Bank Account, Calculated Balance, General List, Sub-ledger Match, Accruable Item, Suspense, Schedule List, and Associated Accounts. See also 9.4. 11.2 Can these reconciliation Yes. Clients also gain access to tasks be edited and/or added our template builder, where to by the user? reconciliation templates can be edited to address specific needs. Example templates reviewed. Many templates can be amended Demonstrated 11.3 What file formats can the application extract to? All grids within BlackLine can be Noted exported to an Excel or CSV file and all standard reports can be extracted to Word, Rich Text, XML, RPT, Excel, CSV, and PDF formats. 11.4 Are there standard reports and/or dashboards within the platform that enable reconciliations to be reported on? BlackLine’s reporting tool is built Reviewed into the system and has over 90 preconfigured reports with filtering and sorting capabilities. This includes the Enhanced (adhoc) Reporting which allows clients to configure reports according to desired fields and schedule automatic reports. No additional training is required to generate reports, and filters are built-in to allow for further configuration. These reports cover all account attributes. Some of the key reports we recommend include the following: • Required Adjustments – This report displays all the items that have been identified by the Preparers as a problem or error. The client has the visibility to see the aging and the amount of the If so please provide details of what is available. 33 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment items. In addition, the client can also run this report for historical purposes and view the period it took for items to be resolved and corrected. • Control Analysis – Everything in BlackLine is in a real-time database. If something was completed just moments ago it appears immediately, everywhere, as “completed”. This report shows when reconciliations were completed in relation to their due dates. This is an excellent report to use in enforcing the company’s policy regarding the timely completion of reconciliations. • Unassigned Accounts – While the administrator is responsible to assign the accounts to users, it is still the responsibility of the accounting managers to make sure reconciliations get assigned – and get completed. This report is a quick check to ensure all accounts are assigned. • Past Due by People – This provides a quick report that shows user’s name, phone number, email address, and what users have not yet completed. In just a few mouse clicks, you now have the ability to reach out and truly manage the process with greater control. • Account Policies and Procedures – This report indicates the policy, purpose, and procedure of the reconciliations. You can quickly review this report to see if your users are updating critical areas on a timely basis. If not, you can take corrective action before it causes a risk. 11.5 What user roles are BlackLine has 15 predefined 34 Reviewed drop down lists Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question provided within the application? Supplier Response Evaluator’s Comment roles, each with a distinct, configurable set of permissions and responsibilities. Broadly, these roles can be classified into four categories: accountant, manager, administrator, and auditor. showing these 11.6 How are the user roles administered? The client's system administrator assigns all user roles and levels of access. Reviewed 11.7 Does the tool have built in workflow capabilities? If so, what is the workflow approval process? Yes. Accounts can be certified and reviewed by up to five separate roles. This workflow is also automated, meaning that users do not have to notify an approver once they have finished a reconciliation. Instead, BlackLine can use automated email alerts to notify the next person in line. Roles also restrict data access permissions for security purposes. Only “Admin” can change the workflow. Each item has a “preparer” and an “approver”, and indeed may have more than one “approver”. Users learn the set up process from the initial training. Processes can be set up one at a time or “en masse” 11.8 How does the system enforce segregation of duties? BlackLine employs a strict segregation of duties matrix to ensure a user does not certify the same reconciliation over multiple roles. Reviewed 11.9 Do any of the accounts have system-wide privileges for the entire system, and if so for what operations? Yes. The business/system BlackLine state the audit trail administrator role has access to all cannot be altered or deleted data stored in the system. They may perform the same tasks as the local administrator across all entities and may also modify system-wide organizational settings. The distinguishing attribute between the business and system administrator is that the system administrator can modify user profiles and security settings while the business administrator cannot. However, even an 35 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment administrator cannot certify a reconciliation, as this would conflict with the segregation of duties principle. 11.10 Does the system include auditor roles that allow for paperless audits by providing on-line access, including on-line notes and evaluations? Yes. BlackLine offers Noted external/internal auditor roles with read-only access. 36 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question 12. Supplier Response Evaluator’s Comment Transaction Matching 12.1 Can data be manipulated? Are there lookups? In particular: Yes. The client can search for Reviewed desired data with BlackLine's advanced filtering via working grids located in all modules. Static item fields can be populated by the client to make drop-down menu items. 12.1.1 Can additional matches be defined by the user? Yes. Users can create their own ad-hoc matching and add additional rules (if so entitled). Noted 12.1.2 Can data from multiple external systems be matched? Yes. BlackLine matching imports Noted can come from multiple systems, in multiple file formats. Matching across multiple data sources is not a problem. 12.2 How frequently can data be imported and matched? The client determines the data import and match frequency. Many clients run the engine multiple times each hour during the close. 12.3 How are unique matching requirements addressed (out-of-the-box functionality, or is coding required)? Describe the creation of matching logic. Who is the primary owner (IT, vendor, business users)? In BlackLine's Matching module, Noted the client has the ability to set up match sets (pre-defined relationships between one, two or three data sources), then run BlackLine's matching engine. BlackLine's transaction matching engine is capable of processing one million transactions per minute. Rules can be either automatic or suggested (i.e., requiring approval). Rules can be run within an account or across accounts. Clients can match debits to credits or based on absolute values. Due to the easy to use nature for transaction matching, the business users are the primary owners. 37 Noted Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment 12.4 Can the following types of transactions be matched: One to one? One to many? Many to one? Yes. BlackLine’s rules allow oneto-one, many-to-one, and manyto-many matching. Noted 12.5 Can it match with variance for both amounts and dates? Yes. Match rules can operate on any fields in the source data file. Date, money, and number fields can be matched within a range of values. Ranges are set in relation to a value and can be uni- or omni-directional (+ 2% or +/2%). Ranges can be expressed as either values or percentages. Noted 12.6 How are transactions tracked? Items are automatically tracked via workflow and viewable on real-time reports. Noted 12.7 How are transactions aged? Items are aged based on the criteria set by the business user. The aging buckets can be configured by the client's system administrator to meet the client's needs. Noted 38 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question 13. Supplier Response Evaluator’s Comment Task Management 13.1 Describe the Task tool. Many companies have found that checklists and disparate policies can delay and complicate the close process. With BlackLine, they can automate the process of checking off different steps while improving efficiency and visibility for each task. Noted 13.2 Provide an outline of how this would be used. BlackLine clients utilise the Task Management product for their close calendar, list of manual journals, departmental close lists, compliance controls, and even their PBC (Prepared by Client) lists. It allows the setting of frequencies (i.e. weekly, monthly or quarterly), due dates expressed numerically, and dates/times relative to the accounting period end. This allows tasks to be scheduled at precise intervals. The calendar shows progress throughout the close and provides unprecedented visibility into the close at both a macro and a drilldown level. Task dependencies validate processes and execute in order and on time. The hierarchical tree of dependencies, defined by an administrator, prevents tasks from being certified before dependencies are completed. The Task Management product is designed to help control month-end close checklists. Noted 13.3 Can auditors use the tool? Yes. BlackLine offers Noted internal/external auditor roles with read-only privileges. Task Management is ideal for tracking of items for audit as well as 39 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment performing and documenting testing on internal controls. 13.4 Can documents be attached / associated with tasks? Yes. Drag and drop functionality is provided to facilitate attaching supporting documentation. BlackLine can accept supporting documents in any file format (e.g., Word, Excel, etc.). Documents can be dragged and dropped to a transaction, task, journal entry and indeed just about anything 13.5 Does the platform provide a built-in library of standard accounting and finance tasks? Yes, Our Controls Assurance solution comes with over 100 sample finance and accounting sample control activities. This also includes the COSO (Internal Controls Framework) compliance framework along with other addon libraries which are being developed. Noted 13.6 Can these tasks be edited Yes, subject to role-based Noted and/or added to by the user? limitations. All users may send a request to the application Administrator to add a task. Preparers themselves can add onetime tasks, and can edit any tasks to which they are assigned. The non-preparer roles can only add comments and/or supporting documents (and request new tasks from the Administrator). 13.7 Can users / roles be assigned to tasks? Yes. The application Administrator assigns users to tasks. Noted 13.8 Can tasks be prioritised? Yes. Our Task Management product includes a task dependency feature, which creates a hierarchical tree of dependencies. Defined by a client’s administrator, these task dependencies prevent any task from being certified before dependent tasks are completed Noted 40 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment and validate that processes execute in order and on time. 13.9 Can tasks be associated so that workflows are created? Yes. Configurable workflows are Noted built in to the BlackLine application. The BlackLine Task Management product incorporates a flexible template structure that can be adapted to any type of task workflow. Task dependencies, frequencies, due dates, and required levels of approval establish workflow to ensure the accurate completion and review of tasks. 13.10 Can authorisations tasks be Yes. Tasks can be configured for built into the workflow? the desired level of approval. 13.11 Can tasks be scheduled at specific times and/or particular dates? Yes. The client will define the offset between the task due date and the period end, and BlackLine will recreate the task based on the frequency specified (e.g., monthly / quarterly / annually / custom frequency) with the appropriate due dates. Tasks can be scheduled in either business days or calendar days, and holidays can be included as well. Clients can also create one-off tasks. 13.12 Can tasks be linked to specific operations within the platform, e.g. undertaking a specific match and reporting the results to a user? Yes. The BlackLine Task Management product can be configured to address almost any type of task list (e.g., close calendars, departmental close lists, compliance controls, PBC lists, etc.). Through BlackLine’s intermodule dependency feature, tasks can auto-certified by completion of the associated action item – for example, completion of a reconciliation or journal could auto-certify the 41 Authorisations are built in as steps in a workflow Noted Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment linked task. 13.13 Can automated tasks be set to send specific communications, e.g. emails or standard letters? Our Task Management product provides email notifications to ensure that each task is on track and deadlines are established, communicated, and met, but our tasks cannot be configured to programmatically trigger events such as sending of emails or standard letters. Noted However, Task Management does manage workflow, though, by defining a structured sequence of steps to be followed by all parties involved (e.g., “prepare document; review/approve document; send document”). In addition, BlackLine can use automated email alerts to notify the next person in line, and the inherent task workflow ensures that tasks move through the process and are executed in order. 13.14 Can the system notify users (alerts, e-mails, etc.) of future tasks and actions required of them? Yes. Alert emails are sent as a daily summary of tasks. Tasks also appear on the user dashboard and to-do list. Noted 13.15 Can the status and progress Yes. BlackLine’s task calendar of tasks be tracked? shows progress throughout the close. Real-time dashboards and robust reporting capabilities also give management immediate visibility into completed and outstanding items. Noted 13.16 Are there standard reports within the platform that enable tasks and workflow progress to be reported on? Noted Yes. Multiple standard reports are included for task status, and custom and ad-hoc reports can be created within BlackLine’s Enhanced Reporting. 42 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question 13.17 Is there an audit trail of changes to tasks? Supplier Response Yes. The Task Management product does include a certification workflow audit trail. 43 Evaluator’s Comment Only administrators can carry out this task, and this audit trail is only available to them Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question 14. Supplier Response Evaluator’s Comment Journal Entries 14.1 Describe the journal entry tool. BlackLine’s Journal Entry product Noted provides a controlled, template approach to centralising manual journals. Companies can create, review, and approve journals, then electronically certify and store them with all supporting documentation. Journals can be posted to the general (or sub) ledger systems, in real time, or one-by-one, or in batch on a schedule. Moreover, pre-posting validation eliminates re-work by preventing Journal Entry rejection from the general ledger due to errors. As an integrated component of BlackLine’s Financial Control and Automation platform, the Journal Entry product ensures seamless integration of journals with reconciling items, transaction matching groups and exception handling. 14.2 Is there bulk journal entry creation functionality? Yes. BlackLine’s Bulk Journals tool provides for automatic allocations of transactions, and adjustments, which are often large volume, that require booking. The bulk journal creation is a logic-based approach based on data sources loaded into the matching library. With logic applied, clients would only need to write journal definitions one time. When new data loads, the required journal amounts will automatically calculate. Journal uploads to the general ledger may be real time or scheduled, either one-by-one or in a batch. Automatic, scheduled uploads can 44 Noted Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment be run every fifteen minutes (or even more frequently in some cases). Actual journal status and numbers are synchronized with the GL so that BlackLine becomes the trusted system-of-record. 14.3 Does the system provide real-time monitoring and reporting of journal entry status? Yes. Users can view details of statuses via real-time dashboards and reports. Noted 14.4 Does the system allow for configuration of journal entry templates with header and lines required for multiple systems? Yes. BlackLine’s Journal Entry product is heavily configurable, meaning that virtually any journal template can be mimicked and/or populated for multiple systems. Yes, as previously noted 14.5 Does the system allow for configuration of user defined validation rules to prevent posting errors? Yes. BlackLine offers the ability Noted to load validation, dependent validation and static description tables to prevent posting errors. During implementation, validation rules are set up to align with the client’s ERP solution and/or the company’s policies. There are two types of validations – independent validation (just referred to as “validation”) and dependent validation. Validation simply validates a single field against a list of valid values. Dependent validation allows clients to restrict posting based on relationships. For example, currency codes are restricted by company codes or legal entities. Clients can also load static description tables. If clients want to add the label of an account number, they can put that into the static description table and BlackLine will populate that description when an account number is entered. These relationships and tables are built 45 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment during the implementation process, owned and maintained by the client. The client’s administrator can import updated tables and rules into their BlackLine instance as needed. 14.6 Is dynamic workflow for journal approval based on thresholds available? Yes. Demonstrated – can be based on any rules the client wants, e.g. under £10k just prepared, under £500k prepared and approved, over £500k prepared, approved and reviewed 14.7 Does the system allow for automation of journal entry posting across multiple systems? Yes. BlackLine’s Journal Entry product is highly configurable, meaning that virtually any journal template can be mimicked and/or populated for posting across multiple ERPs and/or systems. Noted 14.8 Can the customer easily import journal line detail from Excel into the application? Yes. Clients can quickly import completed or partially completed journals from Excel. This is useful when report writers or third-party systems write thousands or tens of thousands of lines to a spreadsheet. Our Bulk Journals tool can further automate processes by providing a logicbased approach to calculate required journal amounts, eliminating the need to create and use formulas in error prone spreadsheets. Reviewed and demonstrated 14.9 Does the system allow for the creation of large volume journal entries based on predefined logic? BlackLine’s Bulk Journals solution provides for automatic allocations of transactions and adjustments requiring booking. Bulk Journals uses a logic-based approach that works off our matching and journals modules. Allocation and look-up tables can be configured and referenced as a Noted 46 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment data source in the journal entry logic. This prompts the automatic creation of the journal based on the pre-defined requirements. For reporting, configurable filters called “My Views” can be created to review, summarize and group data based on types, matching rules, or any other criteria included in the data source. 14.10 Can standard recurring journal entries be set up within the application? Yes. BlackLine journal entry functionality includes one-click cloning for recurring entries. We also offer the ability to create a master journal record which can pre-populate data and create entries in periods going forward. Noted 14.11 Does the platform provide a built-in library of standard journal types? Yes, BlackLine journals are individually configured to a client’s specific needs, during implementation; those configured journals become a client's personalized library of standard journal types (e.g., correcting journals; reversing journals; etc.). Noted 14.12 Can these standard journals be edited and/or added to by the user? Yes, BlackLine’s journal master is Noted configurable. 14.13 Can journal approval workflows be created? Yes. Clients can configure the desired levels of approval. Dynamic workflow automatically routes journals to the appropriate individuals for approval. BlackLine offers a flexible workflow approval process which can be based on amount thresholds. Noted 14.14 Can journals be posted interactively and/or in a batch? Yes. BlackLine offers both realtime journal posting and batch posting. Noted 47 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment 14.15 If batch posting is available can this be scheduled? Yes. Automatic, scheduled uploads can be run every fifteen minutes (or even more frequently in some cases). 14.16 Does the platform allow for journals to be validated in order to check that the posting logic is correct? Yes. Validation rules, Noted relationships and tables are built during the implementation process, owned and maintained by the client. 14.17 Can external documents be attached/linked to journal transactions? Yes. Supporting documents can Demonstrated be attached or referenced via URL links. 48 Noted Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question 15. Supplier Response Evaluator’s Comment Variance Analysis 15.1 Describe the Variance Analysis module. BlackLine’s Variance Analysis Noted product replaces the spreadsheet fluctuation analysis that is manually completed by many companies as part of their risk identification and mitigation process. Using Variance Analysis is straightforward. The business owner first identifies which accounts need monitoring with user-defined parameters, such as account ranges and types, entity filters, balance and percentage thresholds, and comparison periods. Whenever new balances are imported into BlackLine, the rules engine is executed, creating variance analysis templates for the accounts that deviate from defined parameters. 15.2 Does the system track and analyse account variation and budgets/forecasts against actuals for both P&L and balance sheet accounts by replacing manual, spreadsheetdependent processes with business logic? Yes. The Variance Analysis Noted product supports automated, rules-driven monitoring. The client defined rules can be applied to both balance sheet and P&L accounts for budgeted vs. actual, forecasted vs. actual, YTD, month-over-month, quarter-overquarter, and year-over-year comparisons- eliminating the need for manual and error prone spreadsheet analysis. Clientdefined rules precisely identify unexpected fluctuations across target entities and account groups, types, or ranges. 15.3 Does the system fully support fluctuation analysis for multi-currencies and multi-entities? Yes. BlackLine's Variance Analysis product allows for the establishment of configurable rules (by % and/or amount thresholds) which triggers the need for an explanation of the 49 Noted. Examples were set up and worked through, e.g. rules to compare the current month’s balance to any prior periods. These can be by accounts or group of accounts. Variances Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment balance fluctuation. These can be documented and reported metrics can be filtered and on exported to Word, Rich Text, XML, RPT, Excel, CSV, and PDF formats. 15.4 Does the system allow for client-defined rules to identify unexpected fluctuations across target entities and account groups, types, or ranges? If so: Can the rules calculate and monitor for fluctuations in value, percent change, or a combination of the two? Yes. Automated workflow Noted ensures that variance analyses are assigned to the people most familiar with the accounts, so an explanation can be given for each material variance. Once variance analyses have been completed and certified with supporting documentation attached, users can roll up and report on this information. Yes; all three scenarios are supported. Noted Can alerts (tasks) be automatically triggered if fluctuations are outside of userdefined tolerances/limits? Alerts are not created; instead, the variance analysis work item is created and automatically assigned to the appropriate user. Noted 15.5 Once a fluctuation is identified, does the system automatically allocate tasks to users for explaining the variance, route those explanations to management, and roll the results up into real-time dashboards and reports? Yes. The variance explanation is automatically triggered and assigned to the preparer. This is displayed on the user’s dashboard and follows the established workflow and approvals for the variance explanation. Noted 50 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment 15.6 Can the customer upload and store documents and attachments in support of the fluctuation analyses? Yes. Supporting documents of any file type can be uploaded. Noted 15.7 Can the customer create standard variance codes for use in reports to help to monitor and gauge the impact of trends across the entire organisation? Yes. Users can create variance items, which represent a certain identified fluctuation. Each variance item also has a configurable item type (i.e., code) used to create standard coding, allowing management to gauge the impact of an event or trend on its books. Noted 15.8 Can the customer target groups of accounts and monitor their fluctuation in combination or in relation to each other? Yes. Flexible variance account grouping allows clients to target and roll-up accounts for analysis. Noted 51 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question 16. Supplier Response Evaluator’s Comment Consolidation 16.1 Describe the consolidation process. BlackLine Consolidation Integrity Manager (CIM) should not be considered a consolidation tool. Our CIM product is used in the close processes as follows: BlackLine’s Consolidation Integrity Manager (CIM) product gives companies the ability to automate system-to-system reconciliations. This is invaluable if a company has a consolidation system and multiple source general ledgers feeding into it. Before BlackLine, the reconciliation process typically included an extract and manual comparison of balances from both systems, a procedure often complicated by the roll-up process. The Consolidation Integrity Manager automates these processes and automatically verifies that data used by and conveyed between the different systems is properly transferred and reconciled. With the CIM product, relationships are defined between the different systems so that, for example, all cash accounts in a general ledger might roll up to a single cash account in a consolidation system. If the totals match or are within a certain tolerance of each other, the system can automatically certify that particular account reconciliation. This allows the accountant or financial analyst to focus on the exceptions where late-posting journal entries and/or top side adjustments have 52 BlackLine is not a consolidation system, rather it compares consolidation entries. It highlights where there are variances and these are used to identify issues so they can be sorted. It auto-certifies those items that match. Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment changed the balances on one side or the other. 16.2 Does the platform automate the system-to-system reconciliation process to compare single and multiple ledgers within a central consolidation system? Yes. Data from virtually any Noted third- party system, including all major consolidation tools such as Hyperion, SAC BPC, can be imported into BlackLine on a scheduled basis. BlackLine allows clients to automate uploads from GL and consolidation systems; create many-to-one relationships between general ledger and consolidation accounts; auto-certify reconciliations that tie out; create links to journals that result from the tie out process. In addition, BlackLine will automatically decertify and send notifications if balances change on certified reconciliations. 16.3 Can the user group accounts Yes. together to easily map general ledger accounts into the consolidation module and reconcile at any level? Noted 16.4 Can the user easily define relationships between accounts within different systems and reconcile at any level by grouping accounts together? Yes. Noted 16.5 Does the platform automatically subtotal all grouped accounts and associated items? Yes. Noted 16.6 Does the platform autoreconcile where accounts are in balance? Yes. BlackLine can auto-certify when the general ledgers and consolidation systems balances tie-out (equals the sums of the underlying GL balances) or are Noted 53 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment within an established threshold. 16.7 If an account balance reconciled within the consolidation module subsequently changes will an alert (task) be automatically generated by the platform to warn the user that their consolidation may no longer balance? Yes. BlackLine provides for Noted automatic decertification and notifications if balances change on certified reconciliations. When a decertification on a balance occurs, an automated email will be sent to the responsible user. 16.8 Can the platform easily identify late journal entries and provide reports of adjustments by date? Yes. With real-time dashboards, Noted reports and embedded controls, BlackLine allows users to monitor every topside journal entry to ensure late adjustments are not missed. 16.9 Will journal entries and/or other items supporting differences in balances be tracked and aged automatically, offering management full visibility into the consolidation reconciliation process? Yes. Item classification and aging Noted is inherent to the BlackLine application. All items are aged. BlackLine provides dashboard reporting which displays the aging and size of key line items and also filterable fields showing absolute values of GL balances. BlackLine also offers several reports that return key items violating aging and/or amount thresholds. 16.10 Can the platform provide a report that shows all the underlying accounts contained/mapped to a consolidation reconciliation? The face of the consolidation reconciliation itself shows the underlying accounts. 54 Noted Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question 17. Supplier Response Evaluator’s Comment Intercompany 17.1 How does the platform address intercompany reconciliations and link with “account reconciliation” noted in section 11? BlackLine handles intercompany Noted transactions as requests which will be validated, supported and properly routed for the proper approvals. Once both sides of the transaction are in agreement, BlackLine will process the journal If automated processes are entries via configurable rules used please describe these, which will send journal entries to the related controls and note a single or multiple ERP systems the efficiencies arising. for posting. 17.2 How does the platform address the posting of intercompany transactions? BlackLine’s Intercompany Hub ensures this through sender and receiver approvals, journal validations, and automated booking of journal entries to source ERP system(s). Noted 17.3 Does the system provide an approval process to ensure that manual intercompany transactions undertaken within the platform are correctly requested in such a way that they are reviewed, documented and booked on both sides of the transaction? Yes, through BlackLine’s Intercompany Hub. Instead of addressing discrepancies afterthe-fact, BlackLine handles IC transactions as requests which will be validated, supported and properly routed for the proper approvals. Noted 17.4 Can intercompany transactions be addressed at initiation to eliminate reactive manual effort needed to identify discrepancies and one-sided bookings? Yes. Because the agreement occurs on the front-end and the entries are booked automatically, clients can avoid all the manual labour involved with tracking down discrepancies and one-sided bookings (which is typically done in the month following the original booking). Noted 17.5 Can intercompany entries be configured to meet local business needs, including Yes, our Intercompany Hub is built to customise processes through client-controlled Noted 55 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question feeds to multiple ERPs? Supplier Response Evaluator’s Comment configuration instead of vendor controlled custom coding. Within the Hub, entries can be established for each type of service and transaction type, allowing for configurable validation rules and GL string elements that match your unique requirements. 17.6 Can there be one-sided postings? No. As a control, one-sided postings are prevented with the use of BlackLine’s Intercompany Hub. Noted 17.7 Describe any audit trail available. All history is retained for intercompany activities (both sides), including supporting documentation. Noted As with other BlackLine modules, the Intercompany Hub allows for supporting documentation. That documentation becomes part of the history retained for intercompany activities. 56 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question 18. Supplier Response Evaluator’s Comment User Documentation This section applies to any of: online, hardcopy or other (e.g. WWW) documentation – specify which are applicable. The BlackLine user documentation is online, embedded within the application. 18.1 Is the manual clearly laid out and understandable? Yes. BlackLine’s online help feature is structured and indexed. Agreed. The on-line help is very comprehensive. The search process seemed to work well, it was easy to get around with a useful table of contents and very intuitive together with plenty of screen shots 18.2 Is the manual comprehensive and accurate? Yes. BlackLine documentation addresses the needs of both end users and application administrators and is updated on an ongoing basis. Agreed 18.3 Is there an index to the manual? Yes. Agreed 18.4 Is it easy to locate specific topics in the manual when required? Yes. The BlackLine help function Agreed which is both indexed and searchable. 18.5 Is it easy to follow through all procedures in the manual? Yes. Agreed 18.6.1 A tutorial section? Yes. The help function includes numerous tutorial samples (e.g., Sample Account Reconciliation: Checking; Example Account Reconciliation: Prepaid Rent). Agreed 18.6.2 A guide to basic functions? Yes. The help index and search function make it easy to find reference materials on basic functions. Agreed 18.6.3 Pictures of screens? Yes. Agreed 18.6 Does the manual include: 57 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response Evaluator’s Comment 18.6.4 Completed examples? Yes. Agreed 18.6.5 “Error correction” procedures? Yes. The documentation includes Agreed procedures for common errors and problems such as forgotten passwords and lockout. 18.7 Does the documentation clearly specify the actions to be taken by users at each important stage of processing? Yes. Agreed 18.8 Are help screens available relating to the task in hand? (context sensitive help). BlackLine provides “bubble help” explanations that appear to explain key screen fields and controls, when a user hovers the mouse over the item (aka “hover text”). Noted 18.9 Do they provide on-line instructions on how to use particular features of the software? Yes. The help tool includes Agreed sections on application features, and on-line recorded training sessions are accessible as well, via URL links from the application. 18.10 Can they be edited or prepared by the user? If so, can the user add-in their own notes / terminology? No. However, customers can embed their policies and procedures in the accounts, and BlackLine can develop a clientspecific customised help file, on a consulting basis. Noted 18.11 How often is the documentation updated? Documentation is updated on an ongoing basis. Noted 18.12 Will the Software House No. make the detailed program documentation (e.g. file definitions for third party links) available to the user, either directly or by deposit with a third party No. as this is an on-line system and there are no third party links 58 Functional requirements questionnaire BlackLine Enhanced Financial Controls and Automation Platform Question Supplier Response 59 Evaluator’s Comment