Interesting article on User Developed Applications (UDAs). This could also apply to spreadsheets used for internal controls work, especially if they are distributed across departments and not centralized. Applications are typically developed for expense calculation and tracking (e.g. stock comp expense) as well as financial analysis. We try to take an approach that these types of tools should have permission control and be stored in documented locations where appropriate review and updating can be performed. It makes audit-related work much easier in the end!
"Internal Auditors Target Spreadsheets
The practitioners' leading trade group launches a campaign to get better control over spreadsheets and databases created without oversight from IT.
David McCann - CFO.com | US”